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MEMORANDUM FOR Secretary of the Army 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



1. (U/ /FOUO) On 16 December 2010, 1 was appointed to conduct an AR 15-6 
Investigation into the Compromise of Classified Information to Wikileaks. This report is 
the result of a comprehensive, multi-disciplinary, and independent administrative 
investigation into the facts and circumstances associated with the suspected 
compromise of classified national security information by Private First Class (PFC) 
Bradley E. Manning to the Wikileaks organization. Facts related to PFC Manning's 
alleged criminal misconduct are being investigated by law enforcement agencies and 
the ultimate disposition will be in accordance with prescribed laws and regulations. 
Findings and recommendations concerning PFC Manning's alleged criminal misconduct 
are outside the scope of this investigation. Nothing contained herein should be viewed 
as an expression of his guilt or innocence. 

2. (U//FOUO) No Adverse Impact Due to Witness or Information Unavailability. Every 
effort was made to review all available materials, regulations and policies relating to the 
investigation. The investigative team was able to conduct interviews of all necessary 
and relevant witnesses with three exceptions (PFC Manning's aunt, one of his close 
friends, and PFC Manning himself). In accordance with the direction in the appointment 
memorandum not to interfere with the ongoing criminal investigation, PFC Manning's 
aunt and close friend were unavailable for interview. PFC Manning was not approached 
due to his initial Article 31 rights invocation on 8 May 10 and his attorney's 23 July 2010 
email to the United States Forces-Iraq (USF-I) 15-6 Investigating Officer indicating that 
"because PFC Manning faces serious charges which have already been preferred, we 
are not inclined to make him available for an interview." (DA Form 3881, PFC Manning, 
8 May 10 (End N6) and USF-1 15-6, Pages 30-31, 26 Jul 10 (End R1)). Subsequent 
thereto, PFC Manning retained civilian counsel, in addition to his detailed military 
counsel. Considering the charges pending against PFC Manning, his earlier rights 
invocation, and his counsel's stated rationale not to allow an interview in an earlier 15-6 
investigation, the investigative team had no reason to believe that PFC Manning would 
cooperate with this investigation. 

3. (U/ /FOUO) It is my opinion that this investigation was not adversely impacted by the 
unavailability of these three witnesses. Enclosure D contains a full documentation of 
the appointing official's instructions and my investigative methodology. 
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4. (U//FOUO) Report Organization. This report is separated into five discrete sections. 

a. (U//FOUO) Section I: Facts and Background Information Pertaining to PFC 
Manning and the 2d Brigade Combat Team (BCT), 10th Mountain Division (2/10 MTN). 
Section I is further divided into five sections. 

(1) (U//POUO) Section IA: PFC Manning. 

(2) (U/ /FOUO) Section IB: Chain of Command. 

(3) (U//FOUO) Section IC: Personnel Security (Security Clearances). 

(4) (U/ /FOUO) Section ID: Sensitive Compartmented Information (SCI) Physical 
Security. 

(5) (U/ /FOUO) Section IE: Behavioral Health. 

b. (U/ /FOUO) Section II: Regulations, Policies and Facts Pertaining to Information 
Assurance. 

c. (U/ /FOUO) Section III: Leading the New Generation and Understanding Its 
Culture. 

d. (U//FOUO) Section IV: Findings and Recommendations Relating to Information 
Assurance, Personnel Security, Physical Security and Behavioral Health. Section IV is 
further divided into 4 sections. 

(1) (UZ/f^OUO) Section IVA: Findings and Recommendations Pertaining to 
Information Assurance. 

(2) (U/ /FOUO) Section IVB: Findings and Recommendations Pertaining to 
Personnel Security. 

(3) (U/ /FOUO) Section IVC: Findings and Recommendations Pertaining to SCI 
Physical Security. 

(4) (U//FOUO) Section IVD: Findings and Recommendations Pertaining to 
Behavioral Health. 

e. (U//POUO) Section V: Individual Responsibility. 

f. (U/ /FOUO) Section VI: Appendices. 

(1) (U//FOUO) Appendix 1: Personnel Listing. 
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(2) (U/ /FOUO) Appendix 2: Investigative Team Members. 

(3) (U/ /FOUO) Appendix 3: Abbreviations/Acronyms. 

(4) (U//PQUO) Appendix 4: Abbreviations of Ranks. 

(5) (U//POUO) Appendix 5: Definitions. 

(6) (U//POUO) Appendix 6: References. 

(7) (U//FQUO) Appendix 7: Detailed Exhibit Listing. 
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SECTION I: 



Facts and Background Information Pertaining to PFC Manning and the 2d Brigade 
Combat Team (BCT). 10th Mountain Division (2/10 MTN). 



1 . (U/ /FOUO) Before Joining the Army. 

a. (U//PQUQ) Birth through High School Graduation. Bradley Edward Manning was 



mother in Wales, United Kingdom (UK) - her country of citizenship. (Standard Form 
(SF) 86/lnvestigator Notes, SF 86, 6 Dec 07 - 7 Dec 07 (End N1)). PFC Manning 
graduated high school on 9 June 2005 and returned to the United States in September 
2005. (SF 86/lnvestigator Notes, 6 Dec 07 - 7 Dec 07 (End N1)). 

b. (U/ /FOUO) PFC Manning's Return to the U.S. 

(1) (U//FOUO)HHBHB Upon his return to the U.S., PFC Manning lived 
with his father and stepmotnenfTOHahoma City. (SF 86 Application/Investigator Notes, 
6 Dec 07-7 Dec 07 (End N1)). There was conflict between PFC Manning and his 
stepmother. In December 2009, PFC Manning reported to a militar y behavioral health 
provider that in 2005 his father had taken him to a family doctor due ^^H|HH1 



Health Records, 25 Dec 09 (End M1-1)). As discussed later, in section IC, PFC 
Manning failed to disclose, at time of enlistment or on his SF 86, the fact that he saw a 
medical professional for behavioral health issues. (SF 86/lnvestigator Notes, 6 Dec 07 - 
7 Dec 07 (EnclNI)). 

(2) (U/ /FOUO) Conflict with Stepmother. According to PFC Manning, he lived 
with his father and stepmother until 10 April 2006, when his stepmother called the 
Oklahoma City Police Department and reported that PFC Manning threatened her and 
that she wanted him to move out of the house. PFC Manning stated he did not know 



1 (U) Throughout this report, Bradley Edward Manning will be referred to as PFC Manning to reflect his 
current rank and to avoid any confusion. Where his rank is a material fact, the report will indicate his rank 
at the time referenced. 



Section IA: PFC Manning 
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why his stepmother had called the police, and no official action was taken after he 
spoke with the police and agreed to leave the house. (SF 86/lnvestigator Notes, 6 Dec 
07 - 7 Dec 07 (End N1)). A National Crime Information Center (NCIC) database search 
on Bradley E. Manning, conducted as part of his security clearance investigation, failed 
to reveal any adverse criminal information, to include any mention of the alleged threat 
made towards his stepmother. (Advance Fingerprint Report, 26 Oct 07 (End 05)). 

c. (U//FOUO) April 2006 to October 2007. 

(1 ) (U//l=OUO) For Your Entertainment (FYE) Employment. After PFC Manning 
moved out of his father's home, he began working at FYE, in Tulsa, OK. He was 
employed at FYE as an Assistant Manager from 10 April 2006 through 9 June 2006, 
only 61 days. (SF 86, Investigator Notes, 6 Dec 07 - 7 Dec 07 (End N1)). PFC 
Manning was fired from FYE for failing to meet sales goals. (SF 86/lnvestigator Notes, 
6 Dec 07 - 7 Dec 07 (End N1)). When asked on the SF 86, Block 20 whether he was 
ever Tired" from a job, he responded "NO." (SF 86 Application, 26 Sep 07 (End N3)). 
The SF 86 discrepancy is discussed in sedion IC. 

(2) (U//FOUO) Coopermill Apartments, Tulsa, OK. PFC Manning moved into the 
Coopermill Apartments on 1 8 April 2006. Records at the apartment complex indicate 
that he was the only person living in the apartment. He paid the May rent on time, but 
was late paying the June rent. On 12 July 2006, the bookkeeper discovered the 
apartment empty with keys on the counter. PFC Manning's exact date of departure is 
unknown since he "skipped out" on the lease. PFC Manning owed Coopermill 
Apartment $1 ,472.51 for past rent, deaning, damages, and termination fee. (SF 86, 
Investigator Notes, 18 Dec 07 - 27 Dec 07 (End N1)). PFC Manning failed to disclose 
the debt on his security clearance form. (SF 86 Application, 26 Sep 07 (End N3)). 

(3) (U//FOUO) PFC Manning's MovetoMarylan^n July 2006, PFC Manning 
moved to Maryland to live with his aunt, B^^ffijfflWgH I. PFC Manning lived with 
his aunt until he joined the Army in Odobe^007^unn^nis period of time, PFC 
Manning took classes at Montgomery College and worked at Starbucks. (SF 
86/lnvestigator Notes, 18 Dec 07 - 27 Dec 07 (End N 1)). While PFC Mannin g lived with 
his aunt, she took him to a physician be cause he was 01 I. PFC 
Manning wasP 
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2. (U/ /FOUO) Accession into the Army. 



a. (U/ /FOUO) As part of PFC Manning's accession into the Army, he reported to the 
Fort Meade Military Entrance Processing Station (MEPS) on or about 31 August 2007. 
The MEPS processing includes a medical examination which is documented on a DD 
Form 2807-1 (End 023), Report of Medical Histor y. The form includes a series of 
juestions covering behavioral health issues. 




b. (U//F©y©) The enlistment criteria are set out in AR 601-210, Active and Reserve 
Components Enlistment Program, 7 June 2 007 and AR 40-501, Standards of Medical 
Fitnes s, 29 May 2 007 Paragraph HHH of AR 40-501 lists the criteria for which 

B | would disqualify arHndividual from military service. Specifically, it 

c. (U/ /FOUO) Despite the behavioral he alth issues id entified in paragraphs 1.b.(1). 
and 1.c.(3). above, PFC Manning answered HBHHI' n the ne 9 ative * There is no 
other indication of behavioral health review or screening in PFC Manning's enlistment 
documents. (PFC Manning's DD Form 2807-1 , Report of Medical History, 31 August 
2007 (End J1)). 

d. (U/ /FQUO) On 26 September 2007, PFC Manning began his four year enlistment 
in the Active Army. (Enlistment Docs (End J1 )). 

3. (U/ /FOUO) MOS Classification. PFC Manning's enlistment was for service as a 
Military Occupational Specialty (MOS) 35F, Intelligence Analyst. (See DA Form 3286 
(Annex A), dated 26 Sep 2007, U.S. Army Delayed Enlistment Program (End J1); DA 
Form 3286 (Annex B), dated 2 Oct 2007, United States Army Enlistment Program (End 
J1)). In order to be granted the MOS of 35F, PFC Manning needed to meet the 
requirements set out in Department of the Army (DA) Pam 611-21 . The requirements 
included: a score of 101 or higher on the ST (skilled technical) portion of the Armed 
Services Vocational Aptitude Battery (ASVAB); eligibility for a Top Secret/Sensitive 
Compartmented Information (TS/SCI) security clearance; a high school or equivalent 
degree; no criminal convidion for anything other than minor traffic violations; U.S. 
citizenship; and the absence of any no close ties to foreign countries within whose 
boundaries physical or mental coercion is known to be common. PFC Manning met all 
the requirements and had an ST score of 128. (ERB, 29 May 2010 (End J1)). 

4. (U//FQUO) Basic Training. PFC Manning attended basic training at Fort Leonard 
Wood, MO from 5 Odober 2007 until 6 April 2007. His training lasted six months for a 
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course that normally takes ten weeks. (Medical Records - PFC Bradley E. Manning 
(End L); MFR FLW VTC, 28 Jan 1 1 (End 07)). 

a. (U/ /FOUO) Medical Issues. On 12 October 2007, PFC Manning began basic 
training with C Company, 82d Chemical Battalion. (ERB, 29 May 10 (End J)). On 23 
October 2007, less than two weeks af ter be ginning his training, PFC Manning was 
3d in a medical hold status di 




lanning (End L); MFR FLW VTC, 22 Jan 1 1 (End 07)). However, 
PFC Manning was not transferred to the Medical Hold Company. Instead, he remained 
in C Company, 82d Chemical Battalion (MFR FLW VTC, 22 Jan 1 1 (End 07)) pending 
a command decision on whether PFC Manning should be allowed to complete his 
training, be recycled (i.e., transferred) to another Basic Training Company to restart his 
training, or be medically separated. (MFR FLW VTC, 22 Jan 1 1 (End 07)). During his 
security clearan ce interview, PFC M anning indicated he was being separated from the 
service because ^j^j^M/^gm |. (SF 86/lnvestigator Notes, 6 Dec 07 - 7 Dec 
07(Encl N1 )). HoweverHner^^io documentation to show that a separation action was 
initiated. PFC Manning's medical records show medical issues, but these were 
resolved on 12 December 2007 when he was medically released without limitations for 
continued duty at basic training. (Medical Records - PFC Bradley E. Manning (End L)). 



b. (U/ /FOUO) Pencil Stabbing Incident. On 1 November 2007, while in a medical 
hold status, PFC Manning allegedly stabbed another trainee in the stomach several 
times with a pencil (DA Form 2823, )9HI' 9 Se P 10 ( Encl E37 " 1 ))- According to 
Specialist (SPC)^|H|, the other trainee was mocking PFC Manning and had placed, 
contrary to PFC Manning's wishes, objects on PFC Manning's bunk. A verbal 
altercation turned physical when PFC Manning charged the other trainee, striking him in 
the stomach with his head and stabbing him with a pencil several times. Although PFC 
Manning made contact with the other trainee's person, the pencil did not break the skin 
and did not result in any injury to the trainee. The situation was resolved in sh ort orde r 
when other trainees stepped in to separa te the t wo Soldiers. (DA Form 2823, H|, 9 
Sep 10 (Encl E37-1)). According to SPCHH|, the Drill Sergeants were not informed 
by the trainees because "if one perso n ha^g otten into trouble, everybody would have 
gotten into trouble." (DA Form 2823, ■)■, 9 Sep 1 0 (Encl E37-1 )). A review of Fort 
Leonard Wood records failed to revea^n^aw enforcement, disciplinary, or other 
record of the 1 November 2007 incident. (MFR FLW VTC, 22 Jan 11 (Encl 07)). 



c. (U/ /FOUO) March 2008 Command-Referral to Behavioral Health. PFC Manning 
was reassigned from C Company, 82d Chemical Battalion to C Company, 2d Battalion, 
10th Infantry on 22 January 2008 in order to resume basic training. After his 
reassignment, PFC Manning's basic training was unremarkable until 28 March 2008, 
five days before graduation, when he was command-referred to Behavioral Health for 
"tantrum fits of rage." (Behavioral Health Records, SF 600, pages 3-5, 28 Mar 08 (Encl 
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lealth provider found that P F 
^EncTOljJ^ccorain^ I 



(6). (b) (7)1 
). (b) (7)(C) 



The behavioral health provider found that P FC Manning wasj 

The provider P 

(Behavioral Health Records, SF 600, 
pages 3-5, is Mar zuub (bnci Mi )). Accoramg to Fort Leonard Wood officials, 
command referrals near the conclusion of basic training were not uncommon. (MFR 
FLW VTC, 22 Jan 1 1 (End 07)). PFC Manning subsequently graduated on 3 April 
2008. 



5. (U/ /FOUO) Advanced Individual Training. 

a. (U//FOUO) YouTube Video. On 7 April 2008, PFC Manning proceeded from 
basic training at Fort Leonard Wood, Missouri to Advanced Individual Training (AIT) for 
MOS 35F (Intelligence Analyst) training, at Fort Huachuca, Arizona, where he was 
assigned to D Company, 305th Military Intelligence Battalion. (DA Form 2823, 
HHBI 25 Aug 10 (End E64-1); PFC Manning's ERB (End J1». While at AIT, PFC 
Manning posted a video to YouTube regarding Sensitive Compartmented Information 
Facilities (SCIFs) located on Fort Huachuca, Arizona. PFC Manning's video referenced 
his access to classified material, prompting the chain of command to initiate an inquiry. 
PFC Manning was counseled on unauthorized disclosu re and had to provide training for 
the unit regarding Operational Security. (MFR, 7 Feb 1 1 (End (E93-3); CID 
Form 94, 10 Sep 10 (End E93-1); CID Form 94TTeb 11 (End E93-2)). 
Noncommissioned offipers in the unit discussed whether PFC Manninq^ecurity 
clearance should be revoked, but no further action was taken (MFR, 7 Feb 1 1 
(End (E93-3); CID Form 94, 10 Sep 10 (End E93-1); CID Form 94, 7Teb11 (End E93- 
2); PFC Manning Joint Adjudication Management Summary (JAMS), 28 Dec 10 (End 
N2)). 

b. (U/ /FOUO) Unsecured Terminal. There is also some evidence that PFC Manning 
commi tted a security violation by leaving a classified computer terminal unsecured. 
(Email, BH 10 Jan 11 (End E60-1)). PFC Manning may have received an Article 15 
(non-judicial punishment) while he was at AIT, but there is little evidence that this 
occurred. When questioned, his AIT company commander thought she remembered 
some Uniform Code of Military Justice (UCMJ) action associated with PFC Manning, but 
could not remember what it was for or whether it was a summarized or company grade 
Article 15. A review of the Fort Huachuca records failed to discover a ny eviden ce of 
nonjudicial punishment pertaining to PFC Manning. 2 (DA Form 2823, |g£|HL 25 Aug 
10(EnclE64-1)). 



2 (U//FOUO) IAW AR 27-10, Military Justice, for Soldiers in the grade of E-4 or below, Article 15 (non- 
judicial punishment actions) are not filed in the Soldier's Official Military Personnel File (OMPF); rather, 
they are locally filed and maintained for a period of two years or until the Soldier's transfer to another unit 
or General Court-Martial Convening Authority (GCMCA), whichever occurs first. At the two-year or 
transfer point, the record is destroyed. See AR 27-10, paragraph(s) 3-1 6f and 3-37b(1). 
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6. (U/ /FOUO) PFC Manning's Time at Fort Drum, August 2008 - October 2009. 

a. (U/ /FOUO) August 2008 - April 2009. After graduating from AIT, PFC Manning 
reported to Fort Drum, NY on 28 August 2008. PFC Manning was assigned to the S-2 
Section of the 2d Brigade Combat Team. Both PFC Manning's a rrival and as signment 
to 2d Brigade were unremarkable. On 1 1 September 2008, SSG |BH| provided 
PFC Manning with his "Initial / Integration Counseling." During th^ounsenng, PF C 
Manning was advised that Staff Sergeant (SSG) (now Warrant Officer One (W01 )) HB 

was his platoon sergea nt and that all issues were to be handled by either Sg 
himself, SS G|M. (DA Form 4856, 11 Sep 08 (End K)). Master Sergeant 
" wa^he NCOIC of the S-2 section. On 26 September 2008, PFC 
Manning received his first adverse counseling for failing a Diagnostic Army Physical 
Fitness Test (APFT). (DA Form 4856, 26 Sep 08 (End K)). PF C Mannin g was ordered 
to conduct remedial PT and passed his APFT. (Interview MFR, BH| 29 Jan 1 1 
(End E8-4)). On 1 November 2008, PFC Manning was given hi^ontnly counseling for 
October. While praised for his attitude "entirely devoted towards the S-2 shop success," 
his inabilities to get to work on time and maintain situational awareness at all times were 
noted as areas of weakness where he could improve. (DA Form 4856, 1 Nov 08 (End 
K)). Between 1 October 2008 and 5 April 2009, there was no documented evidence of 
misconduct or failin gs on PFC Manning's part. (Counseling Packet (End K)). In March 
2009, MSGjflEjl changed the supervisory responsibilities of the Nonco mmiss ioned 
Officers (NCOs) in the S-2 section due to the upcoming d eparture of SSGflBdl - p FC 
Manni ng was pla ced under the direct supervision of SPC | ^(DA Form 

2823, IHHI 19 Jan 11 (End E78-5)). 

b. (U//F©U©)6 April 2009 Incident. On 6 April 2 009, PFC M anning failed to report 
to physical training (PT). His direct supemsonSPCHDpH | went to his barracks 
room to wake him up and escort him to MSGHBM^vnii^walking to see MSG 

PFC Manning lost his composure andmilitary bearing by waving his arms and 
^roceed[ing] with an unruly outburst of screaming to the extent of expellin^spit, 
clenching [his] fist, and shaking in a fury." Observing this behavior, MSG jgjgj 
intervened, calmed PFC Manning down and eventually convinced him to voluntarily visit 
a behavioral health provider (i.e., self-referral to Behavioral Health). (DA Form 4856, 7 



Apr 09 (End K); DA Form 2823, ■ | 19 Jan 11 (End E78-5);g^j§ MFR, 21 
Dec 09 (E1-1)). On 7 April 2009^h^Manning was given an adverse counseling for 
failure to report to PT on time (Failure to Repair - FTR) and disrespect. (DA Form 4856, 
7 Apr 09 (End K)). Behavioral health records indicate that PFC Manning was first seen 
by Behavioral Health at Fort Drum on 30 June 2009. (Behavioral Health Records, 30 
Jun 09 (End M1-2)). Since PFC Manning self-referred, the evaluation by behavioral 
health providers was not given to the chain of command. During the 30 June 2009 visit, 
the behavioral health provider did not note any psychiatric abnormalities and did not 
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require any follow-up, though PFC Manning was told he could return if needed. 
(Behavioral Health Records, 30 Jun 09 (End M1-2)). 

c. (u//EQyQ) May through July 2009. In May 2009, Sergeant(SCT)l 

beca me PFC Ma nning's dire ct supervisor. When SGT HtH went on leave, 
placed SPC HHH in charge of PFC Manning. (DAhorm 2823, 




"Jun 10 (End E57-2); Interview MFR, 24 Jan 1 1 (End E8-3)). In 

June of 2009, PFC Manning had conducted himselF^IRnough to be recommended for 
competition in the August Soldier of the Month Board. His monthly counseling noted 
u (y)our overall performance has led you to being recommended to compete at the 
August Soldier of the Month Board." (DAForm 4856, 3 Jun 09 (End K)). This 
counseling statement written by SPCjBB^B is, however, at odds with statements 
she mad^iuring this investigation. (dCToJtt^823, 19 Jan 1 1 (End E78-5); DA Form 
2823 JDHE 1 18 Jun 10 (End E78-3)). This recommendations also at odds with 
SOT™ ^overall assessment of PFC Manning. SGT^HH said he noted some 
anomalies and did not think that PFC Manning should deploy^mese anomalies 
included PFC Manning's lack of personal hygiene; that he was a loner and awkward in 
his interaction with others; that PFC Manning was always the focus of distradions in the 
S-2 sedion; and that PFC Manning did not pull his own weight or operate as a Soldier. 
(Interview MFR, B^Qj 26 Jan 10 (End E57-3)). This 15-6 investi gation did not 
uncover any writter^ounseling statements of PFC Manning by SGT|" 
(Counseling Packet, End K). 

d. (U/ /FOUQ) July/August 2009 Incident at the Joint Readiness Training Center 
(JRTC). 3 During the 2/10 MTN's second rotation 4 at JRTC, PFC Manning was 
counseled for another FTR. During the counseling, he had another outburst when he 
slammed a chair down on the g round and r an out of the 2/10 MTN's Tadical Operations 
Center (TOC). (Interview MFR, Hffijg 1 20 Jan 1 1 (End E26-3); DA Form 2823, 
6 Jan 11 (End 46-1)). MSGjgB again intervened, calming PFC Manning 
ancHjetting him back on task. This seco nd incident reportedly resulted in another walk- 
in to behavioral health. (Interview MFR, DHHH 20 Jan 11 (End E26-3)). 
Behavioral health records confirm that PF^Manning was seen by behavioral health 
providers at Fort Drum on 19 August 2009. (Behavioral Health Records (End M1-3)). 

U/ /FOUO) Other Pre-Deployment Incidents and Behaviors. According to SPC 
~ there were several other incidents with PFC Manning prior to the 




3 (U) The Joint Readiness Training Center (JRTC) is focused on improving unit readiness by providing 
highly realistic, stressful, joint and combined arms training across the full spectrum of conflict (current and 
future). With great emphasis on realism, the JRTC provides rotational units with the opportunity to 
conduct joint operations which emphasize contingency force missions. The JRTC training scenario is 
based on each participating organization's mission essential tasks list and many of the exercises are 
mission rehearsals for actual operations the organization is scheduled to conduct. 

4 (U) The standard length of a JRTC rotation is approximately three weeks. 
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deployment. SPC| I noticed that PFC Manning would "freeze emotionally" 
when corrected or redirected in any way. PFC Manning told her he felt "paranoid," and 
that "people were listening in on him." PFC Manning also told her that he had no loyalty 
to the United Sta tes and "that the flag on his sho ulder mea nt nothing to him." (DA Form 
2823, 1 | 1 9 Jan 1 1 (End E78-5)). SPC ■ | does not remember exactly 

when PT^Ma nning made t hese statements, otheHrwHtwas in the March - April 
timeframe. SPC| | also stated that at some point PFC Manning told her he had 
to "scrub the inteme^fanything with his name on it or he wouldn't hav^iotten a 
security clearance." (DA Form 2823, 19 Jan 11 (End E78-5)). sp C|HiH 
specifically recalls, however, that she immediately reported the "no loyaltycina the 
"scrubbing the internet" statements to MSG H| I because she did not think the 
state ments wer e appropriate, especially for Soldier who had a TS security clearance. 
SPC ■ | recalls thatshe even used the phras^jpossible spy" when she reported 
the sta tements to MSGHH | According to SPCHjm she believes that MSG 
brought the "no loy altHo the United States'^tatement to the attention of Major 
THBSBB I' lnte,li 9 ence Section (S-2) officer in-charge (OIC). (DA Form 
2823, | Jan 1 1 (End E78-5)). The in vestigatio n found no other evidence to 

confimnnaTOsuBBB raised this issue to MAJj| I. (Interview MFR.lj | 
19 Jan 1 1 (End ElCT)T None of the incidents descnbea above (the 6 April 200^^ 
incident of FTR and disrespect, the JRTC inddent, and the statement about "no loyalty 
to the United States") resulted in any disciplinary actions or a derogatory report to the 
U.S. Army Central Clearance Facility (CCF). (JAMS, 28 Dec 10 (End N2)). 

f. (U//POUO) Overall Performance. In garrison and pre-deployment, PFC Manning 
was described as a mediocre Soldier by his peers and supervisors. As noted above, he 
had issues with being on tim e. H e was also described as having low per sonal hyg iene 
standards. (DA Form 2823, 1 I 1 3 Jan 11 (End E47^); Interview MFR, ■Effl 1 26 
Jan 1 1 (End 57-3); DA Form" 3, ■ | 19 Jan 1 1(Encl E16-3)). In contrast, 
sever al senior officers in the BCT, including the 2/10 MTN Commander (CDR), Colonel 
(COL) I I said that PFC Manning was a n impres sive briefer. (DA Form 

2823, | (20 Jan 11 (End E56-1); DA Form 2823, j^M 25 Jan 11 (End E92-1)). 

7. (U//FGUO) Decision to Deploy PFC Manning. 

a. (U//FOUQ) Discussions Regarding Deployin^F^Man^g. Prior to 
depl oyment, C hief Warr ant Offi cer Two (CW2) H| ■ recommended to both 

MAJ| I and MSG ■■■ that PFC Mannm^iotdeplo^lnterview MFR, 
HH W20 Jan 1 1 (tncre26-3)). Notwithstanding this recommendation and PFC 
Manning? previous documented behavioral health and disciplinary issue^i^^TR x 2 
and disresped), PFC Manning deployed. The response given to C\N2W///f/M by 
MSG Hip was that since the section was short person nekanc^FC Manmn^Tad not 
comnmtte^ny crimes, he would deploy. (InterviewMFR, || | 20 Jan 1 1 (End 
E26-3)). This comment is confirmed by SPCl , I statement wherein she states 
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that PFC Manning, in essence, had to deploy because "there was nothing on 
could have proved Manning should have stayed behind." (DA Form 2823, " 
Jan 11 (End E78-5)). 

b. (U//FOUO)MSGHH^S-2 NCOIC. According to MSGjHH he personally 
made the decision to deplo^hC Manning despite the behavioranTealfh issues that had 
apparently begur^c^ppear (i.e., two prior outbursts and referral to Behavioral Health). 
(Interview MFR, HH| 2H3eci 09 (End E1-1)). In a Memorandum for Record, dated 
21 December 2009^SG | | wrote "I decided SPC Manning should deploy given 
manpower issues and he seemed receptive to possible therapy and/or medication and 
suffered no other major outbursts." In a statement he provided on 10 June 2010, MSG 




wrot e that he and MAJH I discussed leaving PFC Manning behind. (DA 

(EncTCI- 



orm2823, |HiH 10 Jun 10 (End E1-5)). 

c. (U/ /FOUO) MAJ S-2 QIC. W hen interviewed on 19 January 201 1 , MAJ 

did not recall taMn^o MSG^^H about leaving PFC Manning at Fort Drum 



wrtrnne 




with the rear detachment. MAJ |m | was, howe ver, awa re of some of PFC 
Manning's anger management issues and that MSG H | was trying to get SPC 
Manning beha vioral he alth assistance before the deployment. According to MAJ 

MSG mm dealt with enlisted Soldier issues, but MAJ HHH believed that 

kepHiim in the loop on Soldier issues about 90-95% oMh^ime. MAJ 
Joes not remember talking to the company commander about SPC Manning 
fed that "we didn't take too many issues outside the S-2 shop." (Interview MFR, 
1 19 Jan 11, End E15-1)). 



d. (U/ /FOUO) Chain of Command. This investigation revealed no evidence to 
conclude that anyone in the chain of command, outside the S-2 section, was aware of 
PFC Manning's behavioral problems. Also, there is no evidence that anyone in the 
UCMJ/Administrative chain of command was aware that there w ere concerns a bout 
PFC Manning's suitability for deployment. First Sergeant (ISG)^ | (HHC, 

2/10 MTN), PFC Manning's First Sergeant , confirm ed the deploymenraecision was not 
raised to Comp any leve l. (DA Form 2823, H|H 18 Jan 11 (End E-82-1); see also, 
DA Form 28 23, BH|< 5 Jan 1 1 ( Encl EStHj^Tiis is consistent with SPC 

observation that the S-2 section handled everything "internally ... not 



telling the company commander" and MAJ I I statement that they, th e S-2 
sedion, "didn't take too many issues ou tsia^n^ ^? shop." (DA Form 2823, [~ 
19 Jan 11 (End E78-5); Interview MFR, m 19 Jan 11 (End E15-1)). 

e. (U/ /FOUO) Commanders Guidance. The decision by MSG I ■■ to deploy 
PFC Mann ing was consistent with pre-established criteria by the Brigade Commander, 
COLH I. The commander's guidance on non-deployable personnel or personnel 
retumin^o Fort Drum from theater was based on two questions: "First, could the 
Soldier receive the type of care they needed in a deployed environment? Second, was 
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the Soldier a threat to themselves or others?" If the care was not available in theater or 
the Soldier was a threat to self or others, the Soldier would not dep loy or, if already 
deployed, woulcH^Bturned to Fort Drum. (DA Form 2823, 20 Jan 11 (End 
E56-1)). MSGHj I decided PFC Manning should deploy given manpower issues 
and because Ph^rtanning seemed receptive to therapy and medication. Further, PFC 
Mannin g did not suffer any further outbursts after the July/Augu st 2009 JRTC rotation. 
M ■ Prepared MFR, 21 Dec 09 (End E1-1); DA Form 2823, BH 6 Jan 1 1 (End 

(1) (U// FOUO) 2/10 MTN Mission. COL|m guidance was based on the 
needs of the Soldiers as well as the needs of the mission. The brigade's mission was 
to: 1) partner with and train the 1st Federal Police and the 9th Iraqi Army and provide 
security for the upcoming February 2010 elections; 2) transition to "Iraqi forces in the 
Lead"; and 3) transfer Joint Security Stations (JSSs) and Combat Outposts (COPs) to 
Iraqi control after the elections. 2/10 MTN was assuming the authority for a vast 
expanse of battle space (Eastern Baghdad) and significant number of JSSs and C OPs 
in the brigade's footprint (17 JSSs and COPs). Based on the mission, COL| ■ 
determined that 2/10 MT N neede d all qualified Soldiers to deploy in support ofthe 
mission. (DA Form 2823,gg| 20 Jan 11 (End E56-1)). 

(2) (U//POUO) Unit Strength. Prior to deployment, the number of non- 
deployable Soldiers in 2/10 MTN, at its peak, was 500-600. This number, by the time 
the 2/10 MTN Brigade fully deployed, was reduc ed by 50% to approximately 300 
personnel. The non-deployables, as COLfljH recalls, were "mostly medicals and 
chapters." (DA Form 2823, mi 20 Jan ^Encl E5 6-1)). The situation in the S-2 
shop (i.e., Intelligence Section^as described by COL J| | as "pretty thin. n The 
section was operating with two NCOs out of six authorize^ositions. (DA Form 2823, 

S13 Jan 11 (End E47-4)). Although a cross-leveling of noncommissioned officers 
i the ba ttalion intelligence sections was an option, no such cross-leveling occurred. 
COL | | decided to assume risk by accepting personnel shortages at the 2/10 MTN 
level ratner than impact the battalions where he believed the perso nnel were most 
needed and could provide greater effort to the mission. COL| | noted, "all of my 
staff was relatively thin, but rather than place inexperienced Inte^ersonnel at the 
battalions, I chose to accept risk at the Brigade level instead of at more remote locations 
- particularly in a bottom up, intel-driven fight." (DA Form 2823, HH 20 Jan 1 1 (End 
E56-1)). 



8. (U//FOUO) Deployment. PFC Manning deployed on 1 1 October 2009 with 2/10 
MTN. During November and December 2009, PFC Manni ng worked the night shift in 
the SCIF and w as under the direct supervision of first SPC HHHH ancl ' ater S p C 

| At this time, PFC Manning's rank was Speaafis^DA Form 2823, | 
IflrnTpcl E47^4)). 
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a. (U//EQUQ) 12 December 2 009 Inc ident. During the month of December, PFC 
Manning was counseled by MSG I | for losing his roorr^cey. During the counseling, 
PFC Ma nning shoved a chair and Tegan yelling. MSG ^ | calmed him down. 

MFR, 21 Dec 2009 (End E1-1)). There is no documentation other 
MFR that any further action, such as a negative counseling or UCMJ 
"for PFC Manning's outburst and disrespect in comportment towards 
an NCO. (Counseling Packet (End K); JAMS, 28 Dec 10 (End N2)). 

b. (U/ /FOUO) 18-20 December 2009. Between 18 and 2 0 December, PFC 
Manning was counseled twice by his supervisor, SPC^^H, for FTRs. During the 
second counseling on 20 Dec 2009, PFC Manning screamed and picked up a table, 
then dropped it causing a government computer screen to break. Despite the apparent 

Bto Government property, no investigation or action was taken to assess PFC 
s accountability for the damage. While the incident was brought to 1SG 
attention, this investigation failed to uncover any evidence that damage to 
lent property was brou ght to the attention of the company commander, MAJ 
(DA Form 2823, ■H| 18 Jan 11 (End E82-1); Interview MFR, 
-e p 11 (En d E82-2))^Dunng the incident, PFC Manning moved aggressively 
towards ! PCH . I and then moved in the direction of the weapon s rack. (Interview 
MFR.I ) Jan 11 (End E26-3); DA Form 2823, 1M I 19 Jan 1 (End 

E78-5)^CWZ(Jj^|| intervened and physicall^ubd^^hC^BM | before he 
could get to the \ >ons rack. (Interview MFR, H I 20 Jar^^hncl E 26-3); DA 
Form 2823, ^^^M 19 Jan 11 (End E 78-5)) Captain (CPT) Q 
(Assistant S^^n^Pl^BHM|BBH were both informed of 

PFC Manning's o utburst^mfe rvie^MFR, BBW 20 Jan 1 1 (Enc^26-3)). 
Separately, CVV2HHH|| I, th e targeti n^tfice^nformed ISG^HH about the 
alleged assault. (Tntervie ^MhR, MB I 5 Feb 11 (End 82-2)). In a smorandum for 
Record prepared by MSG(| flatecm December 2009, MSG^I wrote that 
PFC Manning "stated repeatedl^ha t he doe s not feel that he has any problems, and 
therapy will be of little or no value." JHH Prepared MFR, 21 Dec 09 (End E1-1)). 




MSG 




(1) (U/ /FOUO) 24 December 2009 Command-R eferre d Beh avioral H ealth 
Evaluation. Upon hearing about the incident from CW2H I, 1SGB* • . r I went to 
to get the full story. (lnterviewMFRjBj|p Feb 1 f(E8^)). PFC 
was verbally counseled by 1SGHBB| ari^as command-referred to 
Denavioral healtlWDA Form 2823 JHH TarHI (End E82-1)). On 24 December 
2009, PFCm0 was seen by cPTW I, a licensed clinical psychologist 

and membe^^Stn Medical Co mpany^ltnougr^FC Manning was seen on 24 
December 2009, CPTl BB f" led the form documenting his evaluation of PFC 
Manning on 25 December 2009. (Behavioral Health Records, 25 Dec 09 (End M1-1); 
DA Form 2823, ■■■ 18 Jan 11 (End E17-2)). 



15 

UNCLASSIFIED// FOR OFF I CIAL US E ONLY 



UNCLASSIFIED/ /FOR OFFICIAL USE ONLY 

ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



(a) (U//EQyO) Evaluation. CPTB ^diagnosed PFC Manning with 

determined PFC Manning wa 
continued service, and provided some preca utionary fin dings and recommendations 
regarding danger to others. Specifically, CPT^gwB found PFC Manning to be 
"potentially dangerous" and recommended "removal weapon (or bolt from weapon) 
and increased monitoringand supervision." (Behavioral Health Records, 25 Dec 09 
(End M1-1)). CPTjgHQ also found that "(c)hapter separation is not recommended 
at this time but may o^onsidered if his outbursts persist or if he fails a course of 
treatment." (Behavioral Health Records, 25 Dec 09 (End M1-1)^Afterthat incident, 
PFC Manning began regular psychotherapy. (DA Form 2823, 1 8 Jan 1 1 

(End E17-2)). 



ra s not cnec Kec 

CF^I 

time ancHnat 



(b) (U//£©UQ) Lack of Security Clearance Finding. CPTgjg^ filled out a 
"MEDCOM Form 4038 5 ," report of behavioral health evaluation using an unapproved 
form. Block 7 under "Fitness for Duty and Continued Service permits the behavioral 
health provider to indicate the Soldier "is not suitable for continued access to classified 
material and any security clearances should be rescinded." This box wa s not chec ked 
on PFC Manning's 25 Dec 09 "MEDCOM Form 4038" completed by CP1 
(Behavioral Health Records, 25 Dec 09 (End M1)). When interviewed, 
stated that he did not remember PFC M anning as h e only saw him one 

was over one year ago. Additionally, C pT jEHsNHE9 could not reca " the facts and 
circumstances regarding the lac k of any Bl ocl^^ntry on PFC Manning's 25 Dec 09 
"MEDCOM Form 4038." (Email, §|gl9 1 Feb 11 ( Encl E92-1); Behavioral Health 
Records, 25 Dec 09 (End M1-1)). 

(2) (U//FOUO) No Further Company Command Action. Other than the 
command referral to behavioral health and the verbal counseling by the First Sergeant, 
the command took no other action in regards to the 20 December incident. 
Notwithstanding the alleged disrespect, insubordination, destruction of Government 
property, and assault by offer, no UCMJ or disciplinary a ction was pursued against PFC 
Manning. This investigation found no evidence that MAJ ■■■conducted any 
commander's inquiry or investigation of any sort to ensur^nanTe understood the full 
extent of PFC Manning's misconduct and behavioral health issues. Further, the 
command did not suspend PFC Manning's access to classified information and did not 
submit a Report of Unfavorable Information for Security Determination ( DEROG) ( DA 
Form 5248-R) to the CCF. (JAMS, 28 Dec 10 (End N2); DA Form 2823, | 18 
Jan 11 (End E82-1)). 



5 Although MEDCOM Form 4038 was unapproved, it was used for three command referred evaluations 
for PFC Manning. This report will continue to refer to the MEDCOM Form 4038. A greater discussion 
regarding the form appears in the Behavioral Health discussions which follow. 
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c. (U/ZF^Qy©) January - March 2010. PFC Manning took Environmental/Morale 
Leave (EM^rom 23 January to 1 1 February 2010. Upon his return, the new 2/10 MTN 
S-2, CPTBB| placed PFC Manning on the day shift where he could be better 
supervise^During this time, PFC Manning continued to have some problems, such as 
freezing up during briefings and req uiring assis tance to remain focused, but he "wasn't 
as bad as before." (DA Form 2823, (■■I 19 Jan 1 1 (End E78-5)). SPC 

I observed that "P FC Mannin^ iacHio physical incidents because he was 
watchecr (DA Form 2823jpHH| 19 Jan 11 (End E78-5)). PFC Manning's first 
line supervisor, SSGl j^^Htatec Hnat he co nsistently monitored PFC Manning's 
work and behavior. (Interview MFR, H | 24 Jan 1 1 (End E8-3)). 

d. (U//FOUO) Sec ond "No Lo yalty" Comment. Sometime in the February or March 
201 0 timeframe, CW2 I J | reports that the Soldiers were sitting around the SCIF 
and talking about why tne^omed the Army. PFC Manning said "the U.S. Flag meant 
nothing to him and he had no loyalties to our country." When askec^hy he joined our 
Military he said "because he had no choice." (DA Form 2823, | 1 Oct 10 (End 
E26-1)). CW2JI | said that at the time u l was concerne^Tononiis patriotism 
but fo r him becau s^nat could be signs of depr ession or a nger issues." (DA Form 
2823, 1 | 1 Oct 10 (End E26-1)). CW2HH|| could not recall the exact 
date oHni^onversation though he believed thanH iappened a bout the time of the 
EquaKDpportunity (EO) complaint. (Interview MFR, HJHH 2 Feb 1 1 (End E26-5)). 
CPTl I confir med a n anonymous EO complaint was Tebruary-March 2010. 
(DA Form 2823, JM 13 Jan 22 (End E47-4)). SPC^HH states that the EO 
complaint o ccurrec^ometime after PFC M anning returne cnrom EML. (DA Form 2823, 

18 Jan 11 (End E78-5)). MSGHMBH, S1 NCOIC, confirmed that 
TT^Manning was on EML from 23 Jan lOTnougr^^eb 10. (DA Form 2823, 1 I 5 
Jan 11 (End E67-1)). 

e. (U/ /FOUO) April 2010. During April, PFC Manning displayed further unusual 
behavior - stopping in mid-sentence during conversations, giving blank stares when 
spoken to and reporting to be in an altered or disassociated state of consciousness. 
<gH I Prepared MFR, 26 Apr 10 (End E1-2); the MFR is dated 26 Apr 09 but this is a 
typographical error). 

(1) (U/ /FOUO) "My Problem" Email. On 24 April 2010, SPC Manning sent an 
Email to MSG |m labeled "My problem." Attached to the email was a picture of PFC 
Manning appearing as a woman, wearing a blond wig and make-up. The email, in part, 
reads: 

This is my problem, I've had signs of it for a very long time. Its caused 
problems within my family. . . . Now, the consequences of it are dire, at a 
time when its causing me great pain in itself. . . . It's destroyed my ties 
with my family, caused me to lose several jobs, and its currently affecting 
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my career .... I don't know what to do anymore, and the only 'help' that 
seems to be available is severe punishment and/or getting rid of me. All I 
do know, is that fear of getting caught has caused me to go to great 
lengths to consciously hide the problem. As a result, the problem and the 
constant cover-up has worn me down to a point where it's always on my 
mind, making it difficult to concentrate at work, difficult to pay attention to 
whatever is going on, difficult to sleep, impossible to have any meaningful 
conversations, and makes my entire life feel like a bad dream that won't 
end. (Email, Manning, 26 Apr 10 (End 013)). 

(2) (U//FOUO) Referral to Chaplain. Following the above noted email, MSG 
J99 referred PFC Manning to Chaplain (CH) (CPT) HHHHHj on 25 April 2006. 
Ir^memorandu m for Re cord (MFR), dated (mistakenly^^pnTdOOQ (the correct year 
was 2010), MSGHHfl references PFC Manning's bizarre behavior and PFC 
Manning's email o^4%)rilj3ut he does not specify the gender issues that PFC 
Manning discussed. (^Hl Pre P ared MFR > 26 A P r 09 ( Encl E1 " 2 ))- 

(3) (U//FOUO) Failure to Notify Command. MSG HH did not inform anyone 
in the chai n of command about the 24 April 2010 email unti^H une 201 0. (DA Form 
4856, (gfl 7 Jun 10 (Encl 47-5)). No action was taken by MSG JHj| to inform the 
chain o^ommand about PFC Manning's situation, thus preventin^he chain of 
command from taking action to command-refer PFC Manning to behavioral health, 
suspend PFC Manning's access to class ified information, initiate a separation action, or 
submit a DEROG. (DA Form 2823, g| 2 Jun 10 (Encl E47-5); JAMS, 28 Dec 10 (Encl 
N2J). 

f. (U/ /FOUO) 8 May 2010 Assault on Femal e Superviso r. On 8 May 2010, PFC 
Manning assaulted his former team leader, SPC EmU9I in the 2/1 0 MTN SCIF. 
(PFC Manning Article 15 Packet, 24 May 10 (EncUl)^^ 

(1) (U/ /FQUO) Prior to the A ssault. On 7 May 2010 around 1830, PFC Manning 
left an informal section meal. MSGjHH found PFC Manning an hour later in a 
storage room in a fetal position. PF^Manning was sitting upright with his knees tucked 
under his chin obviously a gitated a bout something. He was clutching his head with his 
eyes clenched shut. MS Gfflg| noticed a folding chair with cut marks on the padded 
seat with the words "I want^tcned on the seat. There was an open knife at PFC 
Manning's feet and several cut pieces of vinyl. Initially, PFC Manning was not 
responsive to MSG Eventually, PFC Manning began to respond and stated that 

the calm person who was speaking was a personality independent of the person sitting 
on the floor in obvious pain. PFC Manning drew the analogy of him being a turtle with a 
core personality, and several layers of hardened shell, fragmented and designed to 
protect the core personality, and fu nctionin g in different situations as the need required. 
After spending time with him, MSGgHHfl determined that PFC Manning had recovered 
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sufficiently to finish the last four hours of his shift. 
(End E1-2)). 



Prepared MFR, 8 MAY 10 



(2) (U//FOUQ) The Assaul^After PF^Mannina returned to complete the rest of 

his shift, he assaulted sp C|HH| SPC HBB had been called back t0 the 
SCIF to address a targeting issu^upon entr^nt^ne SCIF, she asked the other 
Soldiers what they had done regarding the s earch for th e information she was 
requested to locate. PFC Manning told SPC HH I he had already conducted the 
search for information she was engaged in an^ls^old her not to berate Soldiers in 
the SCIF. (PFC Manning Article 15 Pack et, 24 May 10 (End J1); DA Form 2823, 

' | 19 Jan 1 1 (End E78-5)). SPCS^^ replied with, "Manning how about 
you get your shi t together b efore you tell me o fix mine." PFC Manning yelled "no" 
and ran at SPC HH|H punchinc^SPC f| I in the face and slamming his body 
into hers. In seiraefense^SPCMl^^B pi nne^hC M anning down and screamed at 
him "is this what you want." (D/ffom^823,|^[ | | 19 J an 11 (End E78- 5)). CPT 
I First UeutenanWI Second Lieutenant and SPC 

(ther^FC)! x . I all witnessed the assault by PF(^Mannin^n^eparated 

the two SolcHer^SPC| | was unaware of whether any of the SCI F personne l, 
at that time, took action t^nforni the chain of command. (DA Form 2823, | 1 9 

Jan 11 (End E78-5)). 



(3) (U//FQUO) Report to Command. The following morning, 1LT 

Bwho was assigned t^h^^^ection in March 2010, wa^nforme 
ng's assault on SPCHH| J Shortly thereafter, 1LTM ^bserved PFC 
Manni ng, still in possessior^fhi^eapon, walking with MSG| J ! | (DA Form 2823, 

1 19 Jai^^EncI E33-1 )). Fearing for the safety of the personnel in the S-2 
section, 1LTB I contacte^h^nc^de judge advocate and the new Company 
Commander, uFT ^ fc | informing them both of PFC Manning's 

assault on SPC ■ ! ^Ri^™iitar^)olice (MPs) were summoned and PFC 
Manning was taker^iwa^rom the S CIF are a. The combination to the dpher lock to the 
SCIF was changed. (DA Form 2823, f/H 1 9 Jan 1 1 (End E33-1 )). 

(4) (U//FOUO) Command Response. The command immediately removed PFC 
Manning's bolt from hi s weapon and assigned him to duty in the supply room. (DA 
Form 2823, | J| 7 Jan 1 1 (End E32-3)). Additionally, the combination on the 
SCIF d oor wa^nanged to preclude PFC Manning from returning. (DA Form 2823, 

19 Jan 11 (End E3-1)). 



g. (U//F©UO)Article 15 and Initiation of Separation Action. Shortly after the assault 
on SPC m HH the process was begun to discipline PFC Manning via a Company 
Grade Amcl^^i he Article 15 was completed on 24 May 2010. PFC Manning was 
reduced from the rank of SPC to PFC and forfeited $446 pay for one month. (PFC 
Manning Article 15 Packet, 24 May 10 (End J1)). Additionally, the chain of command 
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h. (U// PQUQ) Derogatory Report. On 9 May 2010, the Company Commander, CPT 
IliPUn completed a Report of Unfavorable Information for Security Determination 

(DtRO&Report), DA Form 5248-R recommending temporary revocation of PFC 
Manning's clearance "until a determination can be made as to the state of his behavioral 
health." (DA Form 5248-R, 9 May 10 (End N5)). The basis for the action was "Assault 
and Battery." (PFC Manning Article 15 Packet, 24 May 10 (End J1)). The DEROG was 
forwarded to the security manager at division, however, it was returned for additional 
information. When returned to the Division on its second iteration, the report on PFC 
Manning was not processed within the required AR 380-67 timeframe because PFC 
Manning had already been apprehended for his alleged unauthorized disclosure of 
classified and sensitive information and the Divis ion be lieved that his clearance was 
"'out of [the D ivision's] hands'." (DA Form 2823, fOM 20 Jan 1 1 (End E56-1); DA 
2823, BH| 1 0 Jun 1 0 (End E1 -5)). 

i. (U//FOUO)22May2010 Behavioral Health Evaluation. On 22 May 2010, PFC 
Manning was seen by Behavioral Health for a potential miscondud separation action at 
the direction of the company commander IAW AR 635-200, Adive Duty Enlisted 
Administrative Separations. (Behavioral Health Records, 22 May 2010 Eval (End M1- 



PFC Manning yig^UllttHll 

Therefore, it is recorrvrienae FOB 
missions." (Behavioral Health Records, 22 May 2010 Eval (End M1-27)). 

(2) ( U/ /FOUO) Lack of Security Clearance Finding on "MEDCOM Form 4038." 
When CPT^gBU was interviewed regarding the completion of the 22 May 2010 
"MEDCOM Tom4v38" and the absence of any comment pertaining to PFC Manning's 
suitability for access to classified information or retention of a clearance, he noted that 
the block which read "The Service member is not suitable for continued access to 



conte mplate d separation. (DA Form 2823, JSBM 
2823, HH 19 Jan 1 1 (End E33-1); DA Form^sST 
5)). 




7 Jan 1 1 ( End E32-3); DA Form 
afigUgH 19 Jan 1 1 (End E78- 




27)). 
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classified material and any security clearances should be rescinded" (Block 7) was 
intentional ly removed by him to increase the space for the write-up under "Other." CPT 
lEMHUM not ed that he thought the access to classified information issue was "moot" 
becaus^PT had been advised, by PFC Manning's comman der, that PF C 

Manning was removecnronri the SCIF at the time of his evaluation. CPT 
further stated that even if Block 7 on "MEDCOM Form 4038" was not deletecOI^ould 
not have recommended suspension of PF C Manning 's security clearance based on his 
22 May 2010 evaluation. (Interview MFR, HHH< 25 Jan 1 1 ( Encl E17 " 3 ))- 

j. (U//J=QUQ) PFC Manning's Apprehension by CID. On 27 May 2010, PFC 
Manning was apprehended by the U.S. Army Criminal Investigation Command 
(commonly referred to as CID) for his alle ged unautho rized disclosure of classified 
information to Wikileaks. (DA Form 2823, BHHI 1 1 Jun 10 (End E13-2); Search 
authorization (End 033)). 

k. (U/ /FOUO) Road to Wikileaks. Below at Figure 1 is a pictorial description of 
significant dates and events leading up to, and including, PFC Manning's apprehension 
for alleged compromise of classified information. 
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1M7: 2001-2006: 

DOB, Bradley Manning* 

Edward Manning parents divorce; 

(23yo) 



to UK (with 



Classmate quotation: 
"a troublemaking, 
authority-hating 
computer geek" 



2006: 

Returns to US 
Lives with tattter 

DEC 2006 



stepmother 

APR 2008: 

Stepmother aftsges 

Threats. Manning 
| moves out 

Local record check 
j reveals no posce 



SEP 2007: falsifies SF86 on debt 
medical, employment history 

6 OCT 2007 tot APR 2008 
Manning attends basic combat 
training m 82d Chemical Bn 

NOV 2007: Basic trainee reports 
attempted stabbing by Manning 

22 JAN 2008: Manning transfers to 
2-10 Infantry Bn. Medical hold for 



7 APR 2008: 
Manning reports to Fort 
Huachuca for Advanced 
Individual Training (AIT) 
(MOS36P.I 



9JUN 2006: Fired 
from For Your 
Entertainment (FYE) 

JUL 2008: "Skipped 
our on lease 



Command Referred to Behavioral 
Health for "tantrum fits of rage" 

Clearance investigation found him 
in arrears for f|HHH rent an<J 
for CreErTCardPassessed 
Cor by Army Central 
Clearance Facility (CCF) (Debt 
below $7600 cutoff In DeO 
Investigative Standards) 



During ATT: two 
incidents 

- Posting YouTube 
video discussing 
access to classified 
Information 

- Security Violation 
Incident (terminal 
unsecureln SCIF) 

Possible UCMJ action 
during ATT (reason 
unknown: records 
purged after two years) 



Black: Kay events 

Red: Warning/Concerns 





Prv-DeploymentatFort Drum 


Mission Rehearsal Exorcise 


Late 2008 


APR 2009 


JUL2009 AUG 2009 <f Dtjploye V 


■ ■ p IUOIU* 



28AUO 2008: 



to Fort Drum 
and 2/10 MTN 
BCT S-2 as 



MAR 2009: Manning admits 
to sanitizing his Internet 
sites to obtain a otearance 



JUN-JUL 2009: 



for Soldier of the Month 
board by fire Mine 

APR 2009: Manning outburst, supervisor, but « 

confrontation wHh 
supervisor 



Mannings first "s elf -referral" 
to Behavioral Health (at MSG 



endorsed by Chain of 



AUO 2009: Manning 
seoond out burst at 

JRTC. 



him 

Manning's seoond 
"serf-referral" to 
Behavi oral Hearth 
toll 



11 OCTC 



MAR-APR 2009: Mannings firs t No loyalty 
to country " statement (to SPCHB^H 



In Iraq 
DEC 09 



JAN 10- MAR 10 APR 10 



12 DEC 2009: JAN 2010: 

SP C Mannin g counseled by Manning goes 
MSGHH| for losing room onR&Rto 
key, ouWurst ensues Boston MA 



06 APR 2010: WldLsaks 
release* "Collateral Murder" 



MAJHB (BCT S-2) 
resenrwreToiity, 



replaced by 



MAR 2010 



17APR 2010: MAJ 
(Company CDR) 



aaeged to access 



| (Assistant S-2) 

18-21 DEC 2009: Manning 
pattern of negative download 
behavior, counseled twice; Information from 
Manning gets belligerent 
during seoond counseling, 
flaps table over MAR 2010: 

Manning "self-refers" to Mannings second 
Behavioral Health » No loyalty to 

26 DEC 2009: country" statement 

Command-directed Behavioral 



26-29 APR 2010: Manning 
negative behavior 
continuesMHH re 

Msnning to^naplain 



24 APR: "My Problem" email watch. 



7-8 MAY 2010: 
•Manning bizarre behavior 
continues (rocking, cutting^ 
chair), assa ults SPC 

CoC notified, PFC 
on unit 

21 -26 MAY 2010: 
Manning online 
9 MAY 2010: Derogatory chats w| — 
Report Initiated tor US Army 
Central Clearance FaoHtty 
determination of retaining 24 MAY 2010: 
otearanoe Manning Ansole 

16, Reduced to 
1 2 MAY 2010: PFC 
CPTBJ^HH (new company 
CDRTc^nTWrs separation 28 MAY 2010: 
opttone tor PFC Manning Manning 

determined 

"MAY 2010: high risk tor 

Command-directed behavioral homiokle, 
health ovsL recommends sutoWe or 
admin iatnrttve se pa r a tion tor fl ^ w ' 
behavioral health l aeuea 



Figure 1: Timeline of events, PFC Bradley Manning. (U// FOUO) 
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Section IB: Chain of Command 

1. (U/fl^OUQ) Facts Pertaining to the Chain of Command. The following section sets 
out PFC Manning's supervisory chain, as well as his chain of command. The 
supervisory chain was responsible for the day-to-day supervision of PFC Manning. 
However, the chain of command, specifically the company commander, has the ultimate 
responsibility for ensuring good order and discipline within his company and is vested 
with command authority under the UCMJ. (AR 600-20, Army Command Policy, 
paragraph 1-5 (End Q67)). 

a. (U/ /FQUO) Pre-deployment. Figure 2 sets out PFC Manning's supervisory chain 
and his chain of command prior to 2/10 MTN's deployment in October 2009. 



(1) (U//POUO) Squad 
Leaders/First-Line 
Supervisors. PFC Manning's 
pre-deployment squad leade rs 
were as follows: SSGB(J 
from Augu st 2008 - Fe bruary 
2009;SPCB| [j I from 
Marc h 20oCT \pnl2009; and 
SGT from May 2009 - 

Octobe^oob. As set out in 
section IA above, b oth SPC 
■■■1 and SGT m| 
notecnHat PFC Mannin^Tad 
issues and did not think he 
should deploy w ith the un it. 
(Interview MFR, ■ I 29 
Jan 11 (EnclE5^H5A Form 

2823 'BHH 19 Jan 11 

(End 7^)^^ 



(2) (U//FOUO) Platoon 
Sergeant/Second- Line 
Supervisors. SSGH > | was 



BDE CDR 
COL I 



BS TBCDR 
COL I 



Co CDR 
MAJ 



BDEXO 

LTC 1 





$2 HCQtC 
MSG I 



PL T3GT 
BIG 





Legend 




Coordination 
Responsibility 




UCMJ Authority 




Supervisory 


Responsibility 




PFC Manning 



Squ ad Ldr 
SSG | 
Aug 08 - ret> 09 





] 


■ 






-Apf Utf 


I 






fe§5 




PFC Manning 





Figure 2. Pre-deployment Supervisory Chain of 
Command (U/ /FOUO) 



PFC Manning's platoon sergeant 

from August2008 until April 2009 when he was replaced by SGT H J . | (DA Form 
2823, HH 18 Jan 1 1 (End E8-2)). Prior to the deployment, SSG|| . I resumed 
his responsibilities as PFC Mann ing's pla toon sergeant. (DA Form 282?ij I 13 Jan 
1 1 (End E47^t); DA Form 2823, flHI 6 Jan 1 1 (En d E46-1 )). PFC M anning was a 



Shia analyst in the SCIF and was supervised by SSG 



Form 2823, 



20 Jan 11 (End E56-1)). In December 



andCW2| 
9, SSG I 



(DA 



was 
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consulted by SP | regardinc^FC Manning'scontinued practice of reporting late 

to work. SSG J/M |^nd MSG DDH gaveSPCiHHB permission to counsel PFC 

Manning for theb! ivior (DA Form 2823, W//g?^n 1 1 (End E65-1 )). CPT I 
stated th at SSG I ■ was the best overal^maiyst in the S-2 section but that SSu 
KfngTTe. 



« indicated that when SSG f/M 
G H I "checked out a^Heaaer 
(DA Form 2823, ■■ 13 Jan 11 ( EnclE47-4)). CPT|Wurther stated that he 
sometimes wishec^SG HH J was a better leader than analyst because "these 
Soldiers needed mo re leadership. B ( DA Form 2823, | 1 13 Jan 11 (End E47-4)). It 

rredn 



was SGT | ■ opiniorUhaUJSG I I preferred not to b^nqaged with Soldier 
issues. (Intervie^/IFR,H | 26 Jar^(tncl E57-3)). SSGjlHf| depa rted t he 
unit in May 201 0 to attendwarrant Officer Candidate School. (DAVorm 2823, WM 1 3 
Jan 11 (End E47-4)). 

(3) (U/ /FOUO) S-2 Section NCOIC, MSGHBH As the S-2 N COIC, MSG 
| served as a senior enlisted supervisor for PF^Manning. MSG m appeared 
tcH^lware of every instance of alleged miscon duct, behavioral health issue and 
anomalous behavior by PFC Manning. fl| | Prepa red MFR, 21 Dec 09 (End E1-1); 

I Prepared MFR, 26 Apr 09 (End E^)Tl|BPr^ared MFR, 8 May 10 (End 
E^)). However, the evidence indicates that MSG| | failed in his duty to inform 
the chain of co mmand of the true nature and extent oHne proble ms with P FC Manning. 
(Interview MFR,HH Il9 Jan 11 (End E15-1); DA Form 2823, 20 Jan 11 

(End E23-2)). M5GMj( also failed to conduct the necessary counseling or pursue, 
through the command^ oropriate administrative actions or non-judicial punishment. 
As the NCOIC, MSG f| | changed the supervisoryscheme for Soldiers several times 
pre- and post-d eployme nt. (DA Form 2823, HHH I 19 Jan 1 1 (End E7 8-5); 
Interview MFR, | | 26 Jan 1 1 (E nd ES^^^orm 2823, M | 18 Jan 11 
(End E8-2); DA Torm 2823 l ■ | 1 9 Jan 1 1 (End E65-1 ). In a( ion to the 
continuous changes in the S^™cMevel supervisory chain, MSG J | purposefully 
removed or impeded other NCOs and Warrant Officers from participating in the decision 
making process, usurping th eir superviso ry responsibilities over enlisted Soldiers within 
the sectio n. (DA Form 2823, ■ | 24 Jan 11 (En d E26-4); DA Form 2823, 

" 24 Jan 11 (End E8-5FDAForm 2823, ■■■18 Jan 11 (E28-2); DA Form 
9 Jan 1 1 (E16-1 ); DA Form 2823^ ■ 18 Jan 1 1 (E8-2); DA Form 




2823,1 | 21 Jan 1 1 (E43-1 )). When t he decision was made to remove CW2 

t he superv isory chain, CW 2BB|^^B brought th^ssue to the 
attention of MAJ MAJ HH|| suppor >oth MSG ^Hdecision and the 

revised supei^isor^cneme. (D^FomT 2823, H| J 24 Jar^^bncl E26-4)). 
This supervisory scheme/structure resulted in SKtysfuncflonal supervisory relationship 
among S-2 mid-level leaders and enlisted Soldiers. 
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(4) (U// FOUO) S-2, MAJ DHB As the S-2 Section 0\CJAMW/KM had 

super visory r esponsibilities over the Soldiers in the section. MAJ|jH§|Sste^ that 
MSGjHH| took care of enlisted issues, but kept him informed on most issues. MAJ 
i ndicated that he knew that PFC Manning had anger management issues and 
lat MSG m| had been trying to get him behavioral health assistance prior to the 
deploymen^MAJ B9I does not remember ever discussi ng with M SG H^l 
whether PFC Mannin^hould be deployed. (DA Form 2823, H^IH 19 J^^T (End 
E15-1)). 

(5) (U//FOUO^hain of Command. The chain of command began with MAJ 

WandJSG HE|P | The Battalion Commander was CO L (then Lieutenant Colonel 
WBM and the Bri 



brigade Commander was COL fiHI This AR 1 5-6 

™5erof 



Investigation did not reveal any evidence that any member of the chain of command 
was notified about any derogatory information, misconduct or behavioral health issue 
pertaining to PFC Manning during the period of September 2008 through October 2009 
(i.e., the pr e-deploy ment period). (DA Form 2823, gj^Q 19 Jan 1 1 (End E15-1); DA 
Form 2823, 2 0 Jan 1 1 (End E23-2); DA Form 2823. Hfl|| 18 Ja n 1 1 (End 

82-1 ); DA Form 2823, f/KM 5 Jan 11 (End E85-1 ); DA Form 2823, ■ 20 Jan 1 1 
(End E56-1)). 



b. (U/ /FOUO) Deployment. During the deployment, PFC MannirK^supervisory 
chain changed frequently. However, the one constant was MSG |£H who continued 
to serve as the NCOIC of the S-2 Section. Figure 3 below provides a pictorial of PFC 
Manning's deployment technical and UCMJ/Administrative Action chains of command. 
Figure 4 provides an organizational chart depicting the entire S-2 Section during the 
deployment and all other periods relevant to this investigation. 
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BDECDR 
COL 



BSTBCDR 



BDEXO 
LTC 



Jan 10 



1SGH^Hrepioce<l 
by1SG| M\n 

Ma 10 






Legend 




Coordination 




Responsibility 




UCMJ Authority 




Supervisory 




Responsibility 




PFC Manning 



SPC 




PFC 










Manning 



<r 



PFC 
Manning 



SPC 




Pf C Manning moved to 
days after leave (Fvb 10> 

Figure 3. Deployment Supervisory Chain and Chain of Command (U/ /FOUO) 

1) (U/ /FOUO) Initial Supervisory Chain. As noted in Figure 3 above, SSGl 
had supervisory responsibility over PFC M anning du ring the unit's forwarc^^ 
movement from ForU)rum to Iraq. (DA Form 2823, BBI 23 Jun 10 ( Encl E57 ' 2 )» 
DA Form 2823, J| | 20 Jan 1 1 (End E56-1 )). The supervisory chair^^ommand 
changed almost immediately upon the unit's arrival in Iraq. SPC | | PFC 
Manning's garrison Team Leader from March 2009 to April 20 09, w as once again 
designated PFC Manning's direct superviso r, (DA Form 2823, B| 13 Jan 11 (End 

_ was moved to another position. In 
ecame PFC Manning's immediate night shif t 
Jan 1 1 (End E47-4); DA Form 2823, ■H 21 
states that tt l was the pseudo-NCOIC, wnn^^as at 
but I was constantly g etting pulled to Baghdad as 

was the night OIC and 
"2823, ■■■21 Jan 
PF anr 

ncTE47- " 



E47-4)). Within one month, SPC 
November 2009, SPC 
supervisor. (DA Form 
Jan 11 (EnclE65-1)). SPC 
Brigade, I was the night shi 

an LNO. In the beginning there really wasn'^nyone. CPT 
then below me was SPC Manning and SPCj| | (DA_ 
1 1 (End E65-1 )). In the absence of SPC I ™SG 
supervisor. (DA Form 2823, ■■ 1 3 Jan 




let^i 



tanning s 
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(2) (U//FOUQ) Night Shift OIC. In Novembe r 2009, C PT| | was 

QIC, re \ 

Manning. (D A Form 2823, HH 7 Jan 1 1 (End E44-2)). While not sure of the exact 

necHiiql 



made the SCIF night shift QIC, re sponsible for SPC ■ I SPUfl| | and PFC 

duration, CPTi I remained night shift QIC for no more than five weeks and possibly 



as few as three weeks before being moved to a subordinate ba ttalion in December 
2009. (DAForm2823,ip|7Jan11(EnclE44-2)). After CPTm movement to 
battalion, there was no officer on the night shift. (DA Form 2823j| 1 7 Jan 1 1 (End 
E44-2)). I n resp onse to the question regarding a night shift NCOI^auring his time as 
OIC, CPTl I noted: "That's a great question. I walked in there and it was like let's 
just have tn^Sare bones on the night shift. Everything S-2 related primarilWiappened 
during the day so that is where the effort was focused." (DA Form 2823, | I 7 Jan 1 1 
(End E44-2)). At no time during the deploy ment did the night shift have an^uO 
leadership. In fact, CPT| | switched MSGHH to a swinc^hift so there would be 
NCO leadership overlapping day and night. (D^orm 2823,1 1 13 Jan 11 (End E47- 
4)). A common theme across all investigative interviews was that the night shift was 
without senior leadership because the mission essential and critical intelligence 
gathering, analysis and produrt development occurred during the day shift. (DA Form 



i nng, a 

2823, Jgj/l 7 Jan 1 1 (End E44-2)). 

(3) (U// FOUO) Change in BCT S-2. MAJ ■■J was the OIC for the S-2 

Section until January 2010 when he was removecR T\n\s position as S-2 and 

reassigned to a transition team. (DA Form 2823, ■ ^OJan 1 1 (End E56-1 )^MAJ 

I was replaced by his Assista nt S-2, C PTB | (DA Form 2823, | 1 13 
Jan 11 (End E47-4); DA Form 2823, 5 Jan 



H10 Jan 1 1 (End E45-1)). At that time, CPTHl had three assigned duties: 
e S-2; Bri gade Assistant S-2; and Military Intelligence Compan y Commander. 
(DA Form 2823J | 13 Jan 1 1 (End E47-4); DA Form 2823, |H 18 Jan 1 1 (End 
E53-3)). CPTBBPposition ofAssistant S-2 was not filled immediately, requiring CPT 
| to fulfill botruJuties. CPTH I eventually assumed the Assistant S-2 duties after 
several weeks had passed. C^qJ[ did not give u p com mand of the Military 
Intelligence Company until 13 January 2010. (ORB, ■ I 24 Jan 11 (End 0 19)). Upon 
PFC Manning's return from EML on 1 1 February 201O^;PT| | placed PFC Manning 
on the day shift so that PFC Mann ing could have more NCO sup ervision a nd 
leadership. (DA Form 2823, JM 13 Jan 11 (End E47-4)). SSGHB was 

Sble for PFC Manning while he was assi gned to the day shiT^lnterview MFR, 
24 Jan 1 1 (End E8-3); DA Form 2823,^ | 6 Jan 1 1 (End E46-1 ); DA 
23, ■ | 13 Jan 11 (End E47-4)). CPTi snt on EM L in April 2010 and did 
not return untlnlifter PFC Manning's assault on SPCHB 1 I (DA Form 2823, ■ 
13 Jan 11 (End E47-4)). When CPTB| went on leavn^h^Jni ted States , PF(^ 
Manning was returned to th e night shirt ^iltimately assaulting SPC( .1 during one 
such shift. (DA Form 2823. 1 ■ 19 Jan 11 (End E78-5)). 
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COL I I LTC I 
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Legend 
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Supervisory 


Responsibility 
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Figure 4. S-2 Organization After January 2010 (U//FOUO) 

(4) (U/ /FOUO) March 2010 Supervisory Changes. The final major change in 
technical leadership within the SCI F was e xecution of a swing shift plan involving the 
NCO leadership, specifically MSG( | On or about March 2010, CPT(| placed 
MSG B | on a swing shift, allowfn^or NCO leadership overlap betweer^ay and 
night smnsTand providing structu re and s upervision for the night time S-2 (SCIF) 
personnel. About this time, MSG| | per sonally ass umed primary administrative 
supervision of PFC Manning, relegating SSGjiHBHroleto that of production and 
quality control of PFC Manning's work produc^bSGJ^| | left the unit in May 2010 
to attend the Warrant Officer Basic Course. (DA Forrr^82^^H 13 Jan 1 1 (End E47- 
4)). 

(5) (U//FOUO)Company Command. On 17 April 2010, MAJ| 
replaced by CPT|HH| as the Headquarters and Headquarters 1 
2/10 MTN Co mpan^ommander. 

17ApM0(EnclO6)f 
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c. (U/ /FOUO) BCT Commander's Efforts at Understanding the Unit. 

(1) (U// FOUO) COL OH implemented several methods of obtaining information 
about Soldiers within 2/10 M ^TaI I command directed behavioral health referrals were 
required to be brie fed to COLDH by battalion commanders as a matter of routine (DA 
Form 2823, 20 Jan 1 1 (Encl E56 " 1 ))- ln fact > during the deployment, there were 
a total of 24 command referred behavioral health evaluations, resulting in 
"approximately 16" Soldiers being returned to the United States o^telayed from 
returning to Iraq from EML in the United States. (DA Form 2823, H3l 20 Jan 1 1 (End 
E56-1)). 

(2) (U//POUO) Additionally, in January 2010, COLjg^ conducted a 100-day 
review of 2/10 M TN in order to understand his unit and any issues that impacted the unit 
personnel. COLDH was seeking knowledge and information about his unit so that he 
could have bette^ituational awareness of unit stressors, unit stress relievers, Soldier 
recommendations to their leaders, Soldier climate assessments ancMh^Drevalence of 
depression symptoms among the unit personnel. (DA Form 2823, HH 20 Jan 1 1 
(End E56-1)). 

(3) (U// FOUO) Finally, COL_[gJ| was engaged and involved with 2/10 MTN 
staff primaries during nightl y upda tes, and received more in-depth staff updates 
biweekly. (DA Form 2823, 20 Jan 1 1 (End E56-1)). He put into place a 
leadership structure that gav^ne executive officer direct oversight and supervisory 

Bnsibility for staff sections, including the S -2 and S-6 sections. (DA Form 2823, 
20 Jan 1 1 (End E56-1 ); DA Form 2823, Qg| 1 0 Jan 1 1 (End E45-1 )). 
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Section IC: Personnel Security (Security Clearance) 

1. (U// FOUO) Regulations and Policies Pertaining to Personnel Security (Security 
Clearances). The starting reference for the Army's Personnel Security Program is AR 
380-67, Personnel Security Program, dated 9 September 1988. AR 380-67 parallels 
DoD 5200.2-R, Personnel Security Program, January 1987. In addition to these two 
policies, the national investigative and adjudicative standards found in DCID 6/4, 
Personnel Security Standards and Procedures Governing Eligibility for Access to 
Sensitive Compartmented Information, 2 July 1998 (End Q28) and Intelligence 
Community Directive (ICD) 704, Personnel Security Standards and Procedures 
Governing Eligibility for Access to Sensitive Compartmented Information and Other 
Controlled Access Program Information, 1 October 2008 (End Q62), are applicable to 
the security clearance process. The following paragraphs discuss the standards set out 
by these policies. 

a. (U//FOUQ) Overall Process. Once an applicant has been deemed suitable for 
military service, there are five important steps in obtaining access to classified 
information. First, the applicant must submit an application for security clearance using 
an electronic questionnaire (e-QIP) which electronically produces an SF 86. Second, a 
security clearance investigation must be conducted by the Office of Personnel 
Management (OPM). Third, adjudication and determination of the individual's eligibility 
is conducted by the U.S. Army Central Clearing Facility (CCF). Fourth, access is 
granted by the local command. Finally, evaluation of eligibility continues — Soldiers and 
leaders have the responsibility to report derogatory information for individuals with 
security clearances. (Army G-2 MFR, 28 Jan 1 1 (End 04); AR 380-67, 9 Sep 88 (End 
Q23)). The first three steps determine whether a person is eligible to have access to 
classified information. The last two steps are critical to ensuring that access is given to 
the right individuals. The granting of access by the local command requires 
commanders and supervisors to determine, based on what they know about the 
individual and the duties assigned, whether the person should be granted access to 
classified information. 

b. (U/ /FOUO) Security Clearance Process. 

(1 ) (U/ /FOUO) Application. As a general rule, an applicant applies for a security 
clearance after it is determined there is a need for the applicant to have one. Every 35F 
Intelligence Analyst is required to have a TS/SCI clearance. To apply, the applicant 
completes the electronic questionnaire (e-QIP). The applicant must answer all 
questions on the e-QIP honestly and completely to the best of his knowledge. Like all 
applicants, PFC Manning completed an e-QIP questionnaire. (Manning's e-QIP Form 
(End N-3)). 



30 

UNCLASSIFIED/ /FOR OFFICIAL USE ONLY 



UNCLASSIFIED// FOR OFFICIAL USE O NLY 



ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



(2) (U/ /FOUO) Investigation. Because PFC Manning's MOS of 35F required a 
TS/SCI, the investigation process included a Single Scope Background Investigation 
(SSBI). (DA Pam 611-21, Chapter 10, 22 Jan 07 (End Q32)). The SSBI is conducted 
by OPM, which applies the National Investigative Standards. The SSBI can cover a 
period up to 15 years and no less than two years. (AR 380-67, appendix B-4a, 9 Sep 
88 (End Q-23)). Three notable limitations regarding SSBIs are: (1) a prohibition on 
investigation into a person's activities prior to his 16th birthday; (2) a prohibition against 
investigation in a foreign country outside of a military installation; and (3) a prohibition 
against non-consensual review of an individual's cyber behavior (e.g., use of social 
networking websites) as part of the security clearance process. (Army G-2 MFR, 28 
Jan 1 1 (End 04)). Currently, an individual's cyber behavior is not checked during the 
security clearance investigative and adjudica tive proce ss because legal and privacy 
limits have not been clearly defined. (Email, HGKfl 1 Feb 1 1 (019)). Because the 
Army's demographic includes many young Solchere^ecurity clearance investigations 
often cover a shorter period of time. (Army G-2 MFR, 28 Jan 1 1 (End 04)). While this 
poses some risks, the overwhelming majority of these Soldiers have proven that they 
are not a security risk. 

(3) (U/ /FOUO) Adjudication. Once the investigation is completed, it is forwarded 
to the Army CCF for adjudication and determination of the individual's eligibility for 
TS/SCI access. "The adjudicative process is an examination of a sufficient period of a 
person's life to make an affirmative determination that the person is an acceptable 
security risk. . . . The adjudication process is the careful weighing of a number of 
variables known as the whole-person concept." (Intelligence Community Policy 
Guidance Number (No.) 704.2, Annex A, part II, 2 Oct 08 (End Q49)). CCF must follow 
the National Adjudicative Guidelines along with their associated mitigation fadors. 
Mitigation is a part of the adjudication process where the nature and extent of a "red 
flag" is examined in order to determine whether the "red flag" should be considered in 
determining a person's eligibility for a security clearance. (Army G-2 MFR, 28 Jan 1 1 
(End 04)). The 13 adjudicative guidelines and the mitigation factors are listed in the 
Intelligence Community Policy Guidance No. 704.2, dated 2 October 2008 and an 
Under Secretary of Defense Memorandum, SUBJECT: Implementation of Adjudicative 
Guidelines for Determining Eligibility For Access to Classified Information (December 
29, 2005), dated 30 August 2006. (Ends 49 and 48, respectively). Mitigation factors 
include offsetting a person's debt if the amount of debt does not exceed a certain 
threshold amount. The DoD acceptable debt standard is $7,500. (Army G-2 MFR, 28 
Jan 11 (Encl04)). 

(4) (U/ /FOUO) Granting Access. Notwithstanding the granting of a security 
clearance, the local command must still decide whether to grant access to a person with 
a security clearance. The command obligation regarding access is a continuing duty. 
When faced with credible derogatory information, commanders must decide whether to 
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suspend an individual's access to classified information pending the resolution of the 
issue or the final adjudication of a formal derogatory report to CCF. The decision to 
suspend is within the commander's discretion. (AR 380-67, paragraph 8-1 02(a), 9 Sep 
88 (End Q23); Army G-2 MFR, 28 Jan 1 1 (End 04)). 

(5) (U// FOUO) Evaluating Continued Security Eligibility. DoD 5200.2-R and AR 
380-67 establish continuing security responsibilities for commanders, supervisors, 
individuals and co-workers. Both regulations state "the issuance of a personnel security 
clearance or the determination that a person is suitable for assignment to sensitive 
duties cannot be considered as a final personnel security action .... [T]he individual's 
trustworthiness is a matter of continuing assessment." (DoD 5200.2-R, paragraph 
C9.1.1, 2 Feb 96, as amended by OSD Memo "Personnel Security Investigations and 
Adjudications, 10 Nov 98 (End Q31); AR 380-67, paragraph 9-100, 9 Sep 88 (End 
Q23)). 

(a) (U// FOUO) Reasons for Derogatory Report. AR 380-67, paragraph 2-200, 
provides a list of potential behaviors that could result in derogatory reports. These 
include criminal conduct; acts of omission or commission that indicate poor judgment, 
unreliability, or untrustworthiness; and any behavior or illness, including any mental 
condition, which, in the opinion of competent medical authority, may cause a defect in 
judgment or reliability with due regard to the transient or continuing effect of the illness 
and the medical findings in such case. (AR 380-67, paragraph 2-200, 9 Sep 88 (End 
Q23)). 

(b) (U/ /FOUO) Requirement for Personnel and Commanders to Report. 
"Whenever derogatory information relating to the criteria and policy set forth in 
paragraph 2-200 and appendix I (the Army adjudication policy) is developed or 
otherwise becomes available, it shall be referred by the most expeditious means to the 
commander or the security officer of the organization to which the individual is assigned 
for duty." (AR 380-67, paragraph 8-101, 9 Sep 88 (End Q23)). Appendix I of AR 380- 
67 lists the old adjudication criteria for security clearances which were updated in 2006. 
Guideline A of the current adjudication policy references an individual's allegiance to the 
United States. "When the commander learns of credible derogatory information on a 
member of his or her command that falls within the scope of paragraph 2-200, the 
commander will immediately forward DA Form 5248-R (See End Q34) to the 
Commander, CCF." (AR 380-67, paragraph 8-101 , 9 Sep 88 (End Q23)). Neither DoD 
5200.21 -R nor AR 380-67 make a failure to report derogatory information a punishable 
offense under the UCMJ. 

c. (U//FOUO) Training Requirements. DoD 5200.2-R, paragraphs C9. 1.3 (End 
Q34) and AR 380-67, paragraph 9-101, 9 Sep 88 (End Q23) require commanders to 
ensure that all personnel assigned to sensitive duties are initially indoctrinated and 
periodically instructed on the national security implications of their duties and on their 
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individual responsibilities. Both regulations establish that "security programs shall be 
established to insure supervisory personnel are familiarized with their special 
responsibilities in matters pertaining to personnel security with respect to personnel 
under their supervision." (DoD 5200.2-R, paragraph C9.1 .3, 2 Feb 96 as amended by 
OSD Memo "Personnel Security Investigations and Adjudications, 10 Nov 98 (End 
Q31); AR 380-67, paragraph 9-102, 9 Sep 88 (End Q23)). 

d. (U/ /FOUO) Insider Threat Indicators. Prior to October 2010, AR 381-12 (End 
Q16) covered the topic of Subversion and Espionage Directed Against the Army 
(SAEDA) and mandated an annual training session on the subject for every Soldier. 
However, SAEDA never adequately addressed the "insider threat." In October 2010, 
AR 381-12 was revised to include indicators of the "insider threat" and renamed "Threat 
Awareness and Reporting Program." Table 3-1 of the regulation, titled "Indicators of 
Espionage," sets out seven behaviors to be considered. Mental instability or other 
behavioral health issues are not included in the regulation. AR 381-12, Chapter 3 was 
also revised to strengthen the requirements to report "threat-related incidents." 
Specifically, the regulation provides that failure to comply with reporting requirements 
may result in "punishment under UCMJ, as well as adverse administrative or other 
adverse adion." (AR 381-12, paragraph 3-1(a), 4 Oct 10 (End Q16)). 

2. (U/ /FOUO) Facts Pertaining to PFC Manning's Security Clearance. 

a. (U/ /FOUO) Application. As previously noted, PFC Manning's MOS was 35F, 
Intelligence Analyst, an MOS which required a TS Clearance. (DA Pam 611-21). On 
26 September 2007, PFC Manning electronically submitted his OPM SF 86, Security 
Clearance Application via e-QIP. (SF 86, 26 Sep 07 (End N1)). This investigation 
discovered that PFC Manning made three false statements on his SF 86. These false 
statements took the form of PFC Manning's failure to acknowledge a debt, having been 
fired from a job, and having received behavioral health care. 

b. (U//FOUO) Single Scope Background Investigation (SSBI). PFC Manning's SSBI 
was conducted from 10 October 2007 through 15 January 2008 and covered a period of 
time from September 2005 (PFC Manning's return to the U.S. from the U.K.), through 
the end of 2007. (JAMS, 28 Dec 10 (End N2)). During the SSBI, several issues were 
noted by the investigator: PFC Manning's mother was a citizen of the U.K. and he had 
approximately $2,500 in debt ($1472.51 owed to a previous landlord and three other 
collection accounts totaling $929.00). (SF 86, Investigators Notes (End N1)). The 
investigation does not reveal any follow-up investigation regarding the debt or the fact 
that PFC Manning failed to answer truthfully all questions on his SF 86. Furthermore, 
during his personal interview, PFC Manning disclosed that he was fired from a job and 
that his stepmother had called the police accusing PFC Manning of threatening her. 
The investigation did not reveal any follow-up on the fact that PFC Manning had 
indicated on his SF 86 that he had never been fired from a job. In regard to PFC 
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Manning's statement about his stepmother, the investigator ran a check of police 
records and found no mention of the alleged assault. (Army G-2 MFR, 28 Jan 1 1 (End 
04)). The investigation does not reveal any other follow-up by the investigator (the 
stepmother was not interviewed). When asked about these issues, personnel from the 
Federal Investigative Services (OPM) stated that it was determined that there was no 
need to interview the stepmother because there was no police report. Further, the debt 
did not exceed the threshold amount ($7,500) that would allow the investigator to initiate 
an additional contact to confront PFC Manning. (Email Federal Investigative System, 1 
Feb 11 (End 018)). 

c. (U/ /FOUO) Adjudication. Once completed, the investigation was forwarded to the 
Army CCF for adjudication. Both Manning's foreign influence (i.e., mother a UK citizen) 
and his debt were mitigated in the adjudication phase. His mother's UK citizenship (i.e., 
"foreign influence") was mitigated because of the nature of the relationship to the foreign 
citizen (i.e., familial-mother) and the lack of susceptibility to coercion (i.e., a 
determination that the foreign influence would not make PFC Manning susceptible to 
coercion due to foreign national conflict). The debt was mitigated because it was 
determined to be a minor amount below the DoD acceptable debt standard of $7,500. If 
the total debt is less than the DoD standard, it is not considered in the adjudication 
process. (Army G-2 MFR, 28 Jan 11 (End 04); SF 86, Investigators Notes (End N1)). 
On 6 October 2008, PFC Manning was granted a Top Secret/Sensitive Compartmented 
Information (TS/SCI) level clearance. (OPM File (End N4); JAMS, 28 Dec 10 (End N2); 
Army G-2 Memorandum, 28 Dec 10 (End Q-42)). 

d. (U/ /FOUO) Issues Not Considered During Security Clearance Process. The 
following are issues that were either not known by the investigators and adjudicators 
assigned to PFC Manning's case, or known to them, but not fully considered. Each of 
these issues raises concerns regarding PFC Manning's trustworthiness and reliability. 

(1) (U/ /FOUO) PFC Manning's Time in the UK. As OPM does not have 
jurisdiction to conduct background investigations in a foreign country, no one in the UK 
was interviewed. In a newspaper interview conducted after the Wikileaks incident 
became public, one of PFC Manning's UK high school classmates described PFC 
Manning as a "troublemaking, authority-hating, computer geek." (UK Telegraph Article, 
29 Jul 10 (End 021)). 

(2) (U/ /FOUO) Pre-Army Behavioral Health Issues. Section 21 of the SF 86 
asks: "In the last 7 years, have you consulted with a behavioral health professional 
(psychiatrist, psychologist, counselor, etc.) or have you consulted with another health 
care provider about a mental health related condition?" PFC Manning answered this 
question, "No." The security clearance investigation did not discover any information 
regarding PFC Manning's previous behavioral health concerns or prescription for 
behavioral health related drugs, and therefore these issues were not considered during 
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the security clearance process. Although the Section 21 question was subsequently 
revised by an 18 April 2008 Secretary of Defense Policy Memorandum, Subject: Policy 
Implementation - Mental Health Questions, SF 86, Questionnaire for National Security 
Positions, PFC Manning would have been required to answer the questions truthfully. 
The 2008 Secretary of Defense policy states an individual can answer "no" to the 
behavioral health questions if they received counseling or were hospitalized for "strictly 
marital, family, grief, not related to violence [by the individual]" or "strictly related to 
adjustments from service in a military combat environment." PFC Manning sought 
assistance for anxiety issues not related to any military deployment, and therefore the 
2008 Secretary of Defense policy would not have excused him from answering 
Question 21 in the affirmative and disclosing the nature of his previous treatment. 
(SECDEF Policy, 18 Apr 08 (End 024)). 

(3) (U/ /FOUO) Nature of Debt. From the adjudication process, it appears that 
the nature of PFC Manning's debt to the Coopermill Apartments was not considered 
because the amount of debt was less than the DoD acceptable standard of $7500. 
Rather than satisfying his financial obligations, PFC Manning "skipped out" on the lease 
by abandoning his apartment without telling the landlord. The manner in which the debt 
was accrued raise questions about PFC Manning's reliability and trustworthiness that 
should have been considered during the adjudication process. (SF 86, 4 Oct 07 (End 
N-3)). 

(4) (U/ /FOUO) Military Incidents. By the time his security clearance was 
awarded on 6 October 2008, PFC Manning had at least three notable incidents: alleged 
assault of another Soldier in November 2007; command referral to Behavioral Health in 
March 2008; and potential security violations while at AIT between April and September 
2008. The first incident occurred during the SSBI investigative stage and the latter two 
during the adjudication phase of PFC Manning's clearance application processing. The 
OPM investigators (and the command) were unaware of the first incident. As no 
derogatory reports were forwarded to the CCF (JAMS, 28 Dec 10 (End N2)), none of 
the incidents were considered during the adjudication phase of PFC Manning's security 
clearance process. 

e. (U/ /FOUO) Failure to Evaluate Continued Eligibility. 

(1) (U/ /FOUO) Reporting Requirements. Despite PFC Manning's conduct and 
behavioral health issues, his supervisors failed to tie or link his actions to his security 
clearance. Regulations require that derogatory information within the scope of 
AR 380-67, paragraph 2-200, be immediately forwarded to the commander or security 
officer. (AR 380-67, paragraph 8-101, 9 Sep 88 (End Q23)). Further, commanders are 
required to immediately forward credible derogatory information to the CCF. (AR 380- 
67, paragraph 8-1 01 (b)(1), 9 Sep 88 (End Q23)). 



35 

UNCLASSIFIED/ /FOR OFF I C I AL USE ONLY 



UNCLASSIFIED/ /FOR OFF I CIAL USE ONLY 

ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



(2) (U/ /FOUO) Misconduct within the Scope of AR 380-67, Paragraph 2-200. A 
review of PFC Manning's conduct since entering active duty indicate that there were no 
less than fourteen discrete events, occurring on different dates and times, prior to his 25 
May 2010 apprehension, which individually, or in the aggregate, should have resulted in 
a DA Form 5248-R, Report of Unfavorable Information for Security Determination, being 
forwarded to CCF: 



1. NOV 2007 

2. MAR 2008 

3. JUN 2008 



4. APR 2009 



5. APR/MAY 2009 



6. APR/MAY 2009 



7. AUG 2009 



PFC Manning allegedly assaults another Soldier at basic 
training (not reported by Soldiers, no action taken); 

PFC Manning is command referred to Behavioral Health 
for "tantrum fits of rage" (no further action, "not abnormal 
for basic training 1 )] 

PFC Manning posted videos on YouTube discussing his 
access to classified information and left computer 
terminal unsecured. (Possible UCMJ action, counseling 
and corrective training; no records available, no 
DEROG)] 

PFC Manning counseled for failure to repair resulting in 
an emotional outburst and a self-referral to Behavioral 
Health (command not informed by supervisor, no UCMJ 
or DEROG report)] 

PFC Manning makes statement that he has "no loyalty" 
to the United States and that the patch (i.e., American 
Flag) on his shoulder "meant nothing to him" (command 
not informed by supervisor, no UCMJ or DEROG report)] 

PFC Manning states to another Soldier that he had 
erased his internet blogs before he joined the Army or he 
would not have received a security clearance (MSG 
informed; command not informed, no UCMJ or 
JG report)] 

Negative counseling at JRTC for FTR followed by 
emotional outburst where PFC Manning shoves chair 
(command not informed by supervisor, no UCMJ or 
DEROG report)] 
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8. DEC 2009 PFC Manning is counseled by MSG HH for losin 9 his 

room key and has an emotional outburst^com/nand not 
informed by supervisor, no UCMJ or DEROG report)] 

9. DEC 2009 - PFC Manning is counseled for another FTR and has an 

emotional outburst, is disrespectful and insubordinate 
and commits an assault on ("assau lt by offer" in violation 
of Article 128, UCMJ) SPC0HI in the SCIF 
(command referred to Behavioramealth; counseled by 
1SG, no further inquiry by commander to determine 
exactly what happened, no UCMJ action, no DEROG 
report)] 

10. DEC 2009 - PFC Manning sees Behavi oral Health Care Provider - 

repor^tate^F^Mar^ 

• — "^^^Ph^Mfimnin^s 

deeme^fno^uty^epara^ warranted (unless 
outbursts continue); however, provider noted PFC 
Manning was a moderate risk for aggression and 
recommended that command consider removing the 
weapon or bolt from his weapon (no DEROG Report)] 



1 1 . FEB/MAR 201 0 - Soldiers in SCIF talking about why they joined the Army; 

PFC Manning said the US flag meanUiothingto him and 
he had no loyalties to the US. CW2H^B| not 

concerned about PFC Manning's patnoflsmHxit about 
whether PFC Manning was depressed or had anger 
issues (command not informed, no DEROG report)] 



1 2. APR 201 0 - PFC Manning sends MSG BHI an Email Sub J ect " M y 

Problem" with an attached photograph of himself in a wig 
with make-up, portraying himself as a woman (command 
not informed, no DEROG report)] 

1 3. MAY 201 0 - PFC Man ning sends an E mail to S GT HHI and SSG 

H with a cc to MSG Subject 'Situation" 

wheremhe describes the enc^fa "close relationship" 
(command not informed, no action taken)] and 



14. MAY 2010 - PFC Manning physically as saults SPC| 

(command informed by 1LT|^ 
PFC Manning receives non-judicial punishmenl 
(Company Grade Article 15) with adjudged reduction 



saults SPC [jyiia 

( not MSufl 

-judicial punishmen^^^ 
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from SPC to PFC and forfeiture of $446 pay for one 
month, separation initiated (behavioral health evaluation 
conducted), DEROG filed). 

f. (U// FOUO) Command Awareness. While MSGHH was aware of the great 
majority of these events, it does not appear that he informed the command about each 
of these incidents or the full nature of PFC Manning's conduct and behavi oral health 
issues. With the exception of the December 2009 outburst related to SPCgSUjjfl Bit 
appears the chain of command was uni nformed of all others. (DA Form 2823jH| 
20 Ja n 11 (E nd E23-2); DA Form 2823, UgH 18 Jan 1 1 ( End E82-1); DA Form 
2823, |gB 20 Jan 1 1 (End E56-1 ); DA Form 2823, | — 5 Jan 1 1 (End E85-1 )). 
With regards to the December outburst involving SPCl| | the c ommand did refer 
PFC Manning to behavioral health and counsel him (DA Form 2823, 18 Jan 1 1 

(End E82-1)), however, no action was taken in regard to his security clearance. (JAMS, 
28 Dec 10 (End N2)). The company commander also failed to conduc^n^urther 
inquiry to determine the exact nature of the situation. (DA Form 2823, j^nl 20 Jan 
11 (End E23-2)). 



g. (U//POUO^ay2010 Derogatory Information. Only after PFC Manning 
assaulted SPCj^HH and received a formal Company Grade Article 15 was a DA 
Form 5248-R, KeporwRjnfavorable Information for Security Determination, completed. 
(DEROG, 9 May 1 1 (Note -erroneously dated in original as 201 1, however, actual date 
was 2010 (End N5)). Due to administrative issues in theater, the report was not 
forwarded to C CF unti l 18 June 2010. (Army G-2 Memorandum, 28 Dec 10 (End Q42); 
DA Form 2823, gg| 20 Jan 1 1 (End E56-1 )). 

h. (U// FOUO) Behavioral Health Issues and Security Clearance. 

(1) (U//FOUO) PFC Manning. PFC Manning's behavioral health issues 
prompted no action related to his security clearance at the 2/10 MTN level until May 
2010. Prior to May 2010, PFC Manning's supervisors and those aware of his behavioral 
health issues believed that PFC Manning might be a threat to himself or others, but 
never considered him a security threat. 

(2) (U// FOUO) Division Process. According to LTCHH|^HH^ United 
States Division-Central (USD-C) G-2, command referrals tc^enaviorafflealth for 
Division-level Soldiers would be reviewed by the G-2 and G-2 SGM for purposes of 
determining whether a Soldier's clearance should be suspended. There was no such 
process at 2/10 MTN. Depending on the nature of the situation, a suspension of access 
may or may no t have been followed up by a derogatory report to the CCF. (Interview 
MFR, WEuM 24 Jan 1 1 (End E39-1 )). ' 
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Section ID: SCI Physical Security 

1 . (U/ /FOUO) SCI Physical Security and 2/10 MTN SCIF Operations. 

a. (U/ /FOUO) Applicable Regulations. The following section sets out the applicable 
regulations in the area of SCI Physical Security. 

(1) (U//FOUO) Intelligence Community (IC) Hierarchy. In the area of physical 
security for SCIFs, regulatory guidance is provided at the national level. The Director of 
National Intelligence (DNI) is the head of the United States Government Intelligence 
Community (IC), having replaced the Director of Central Intelligence (DCI), who held 
that position until 2005. DNI policies are implemented by the various government 
agencies through Cognizant Security Authorities (CSAs). The IC CSA for all agencies 
under the DoD, including the Department of the Army, is the Defense Intelligence 
Agency (DIA). As the DoD CSA, DIA promulgates the DoD Sensitive Compartmented 
Information (SCI) physical security policy set by the DNI. 

(2) (U/ /FOUO) Office of the Director of National Intelligence (ODNI) Policies. 

(a) (U/ /FOUO) DCID 6/9 (End Q25). The Director of Central Intelligence 
Directive (DCID) 6/9, Physical Security Standards for SCI Facilities, was the DNI policy 
in place at the time of the that PFC Manning is alleged to have disclosed classified 
material. DCID 6/9 was published in 2002 under the authority of the DCI. When DNI 
replaced the DCI as the head of the IC, the DCID 6/9 was adopted as a DNI policy. 
(Army G-2 Memo, 28 Jan 11 (End 04)). 

(b) (U//FOUQ) DCID 6/9 Amended 1 December 2005. On 1 December 2005, 
ODNI published ICP Memorandum No. 2005-700-1, which superseded Annex D, Part I 
of DCID 6/9. Annex D, Part I pertained to electronic equipment in SCIFs. (ICP Memo 
2005-700-1, 1 Dec 05 (End Q61)). 

(c) (U/ /FOUO) DCID 6/9 Rescinded 26 May 2010. On 26 May 2010, Intelligence 
Community Directive (ICD) Number 705 rescinded DCID 6/9, but provided that "IC 
elements may continue to operate SCIFs accredited as of the effective date of this 
Directive in accordance with physical and technical security requirements applicable at 
time of the most recent accreditation or re-accreditation." (ICD No. 705, Sensitive 
Compartmented Information Facilities, paragraphs B.2. and D.3., 26 May 10 (End 
Q57)). Further, paragraph D.2. of ICD No. 705 states new guidance will be published 
within 90 days. (ICD No. 705, paragraph D.2, 26 May 10 (End Q57)). According to 
Department of the Army G-2 personnel, DIA has stated that DCID 6/9 is the standard for 
all current SCIFs until the ICD policy has been signed. (Email, Schoch, 2 Feb 1 1 
(029)). ICD No. 705.1 was signed on 17 September 2010; however, it refers to the 
Technical Specification for Construction and Management of Sensitive Compartmented 
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Information Facilities, which is still in draft form. (ICD Memorandum Number 705.1, 17 
Sep 10 (End Q58); Technical Specification for Construction and Management of 
Sensitive Co mpartme nted Information Facilities, v. 10, January XX, 201 1 (draft) (End 
Q60); (Email, 7 Feb 11 (End 034)). 

(3) (U//fOUO)DoD 51 05.21 -M-1 (End Q24). DIA's guidance for SCIFs is 
provided in DoD 5105.21-M-1, often referred to as simply the "M-1" by those in the IC. 
In a deployed theater, the Combatant Command's Special Security Officer (SSO) also 
has security cognizance. (DoD 51 05.21 -M-1, Chapter 1, paragraph D.3, Aug 98 (End 
Q24)). The M-1 predates the DCID 6/9 by four years. 

(4) (U/ /FOUO) Army Regulations. AR 380-28, Department of the Army Special 
Security System is classified CONFIDENTIAL and implements DoD 5105.21-M-1 (End 
Q24)). AR 380-28 requires the establishment of an Entry and Exit Inspection Program 
to deter removal of classified materials from a SCIF without authorization. AR 380-5, 
Department of the Army Information Security Program (End Q11) was published on 29 
September 2000 and provides specific guidance for the SCIF Entry Exit Inspection 
Program and Two Person Integrity for TOP SECRET Information. (AR 380-5, 
paragraph 6-36, 29 Sep 00 (End Q1 1)). AR 380-5 predates DCID 6/9 by 2 years. An 
ODCSINT (now Army G-2) Memorandum dated 4 June 2001, states that any conflict 
between AR 380-28 and the M-1 would be resolved in favor of the policies and 
standards set out in the M-1. (ODCSINT Memo Re: DOD 51 05.21 -M-1, 4 Jun 01 (End 
Q43)). 

b. (U/ /FOUO) Regulatory Requirements. 

(1) (U/ /FOUO) SCI Physical Security Personnel. DoD and Army Regulations set 
out the roles and responsibilities of SCI physical security personnel. These include: 
Senior Intelligence Officer (SIO); Special Security Officer (SSO); and the Special 
Security Representative (SSR). Figure 5 below captures pidorially the SCI physical 
security layout during 2/10 MTN's deployment. 
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Figure 5: Theater Physical Security Laydown re: 2/10 MTN (U//FOUQ) 



(2) (U/ /FOUO) Senior Intelligence Officer (SIO). The SIO is the highest ranking 
person charged with intelligence and security functions within a command or element of 
an IC organization. (DoD 5 1 05.2 1-M-1, August 1998, Chapter 1, paragraph F.4, Aug 98 
(End Q24)). For USF-I the SIO was the J2. For USD-C, the SIO was the Division G-2. 
According to the M-1 , the SIO should be of a rank no lower than 0-5 or civilian 
equivalent grade. (DoD 51 05.21 -M-1 f Chapter 1, paragraph F.4., Aug 98 (End Q24)). 
The SIO exercises overall management of SCI. Among the many functions of the SIO 
is appointment of Special Security Officers (SSO) and Special Security Representatives 
(SSR). (DoD 51 05.21 -M-1, Chapter 1, paragraph F.4.a. Aug 98 (End Q24)). When not 
deployed, all SSRs below division level should be trained and appointed by the G-2 of 
the division or corps headquarters exercising Training and Readiness Oversight (TRO). 
As applied to the "modular" Army, SIOs or G-2s of divisions accepting operational 
control of brigades from other organizations also accept the brigade SSRs that have 
been trained an d appoint ed by those brigades' senior headquarters at home station. 
(Interview MFR.BBp 24 Jan 11 (End E39-1); USF-I J2 Memorandum, 21 Jan 11, 
paragraph 5 (Encre*46)). 

(3) (U//POUO) Special Security Officer (SSO). The SSO is a commissioned 
officer, warrant officer or civilian (GS-9 or above). The SSO provides SCI security 
oversight for SCIFs in the SSO's area of operations. Among other duties, the SSO 
conducts or otherwise manages SCI personnel, SCI information, physical and technical 
security adions and physical and technical security procedures. (DoD 51 05.21 -M-1 , 
Chapter 1, paragraph F.5.a(6), Aug 98 (End Q24)). 

(4) (U/ /FOUO) Spedal Security Representative (SSR). The SSR, under the 
diredion of the supporting SSO, is responsible for the day-to-day management and 
implementation of SCI security for a "separate subordinate SCIF." The SSR is a 
commissioned officer, warrant officer, the most senior non-commissioned officer (of the 
SCIF) or a civilian in the grade of GS-7 or above. (DoD 51 05.21 -M-1 , Chapter 1 , 
paragraph F.5.b., Aug 98 (End Q24)). 
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(5) (U//FGUO)T-SCIF b Approval Authority. T-SCIF approval authority was 
delegated to U.S. Central Command (CENTCOM) for T-SCIFs deploying in support of 
Operations ENDURING FREEDOM, IRAQI FREEDOM, and NEW DAWN. (DA G-2 
Memorandum, Subject: T-SCIF Guidance for Army Units Deploying in support of 
Operation Enduring and IRAQI Freedom (OEF/OIF), 27 Feb 06 (End Q53)). 

(6) (U/ /FOUO) CENTCOM. CENTCOM published guidance on SCI physical 
security that was consistent with the M-1 . It complied with DCID 6/9 with the exception 
that it did not require procedures to be established for SCIF entry/exit inspections. 
(CCR 380-12, 4 Aug 10 (End Q44)). 

(7) (U/ /FOUO) USF-I. USF-I published a USF-I J2 SSO Operating Procedures 
which focused solely on personnel security (USF-I SSO SOP, undated (End Q63)). 
USF-I did not have any SSO/SSR training program in place because units are required 
to ensure SSOs/SSRs have attended appropriate training prior to arrival in theater 
(USF-I J2 Memorandum, 21 Jan 11 (End Q46)). While USF-I did not mandate formal 
SSO/SSR training, training and reference materials were available via the USF-I 
command security website. (USF-I J2 Memorandum, 21 Jan 11 (End Q46)). 

(8) (U/ /FOUO) Policy on Rewriteable Media in a SCIF. Annex D of DCID 6/9, as 
amended on 1 December 2005 by ICP No. 2005-700-1, sets out the policy on Personal 
Electronic Devices (PED). The amended Annex D also provides guidance regarding 
the need to establish mitigation policies for high and medium vulnerability electronic 
devices. (ICP No. 2005-700-1, 1 Dec 05 (End Q61). On 25 August 2006, DIA 
published the DIA SCIF PED Policy, with an effective date of 1 November 2006. The 
DIA SCIF PED Policy lists "hardware/software associated with PEDs and removable 
magnetic/optical media, storage devices, thumb drives, etc" as high-vulnerability PEDS 
and states that only government owned devices are allowed in SCIFs. (DIA SCIF PED 
Policy, 25 Aug 06 (End Q18)). Annex D was updated in 2005. Further, the Security 
Safeguard section states ". . . electronic media such as floppy disks, CDs etc . . . Must 
be closely controlled by the SSO." (DIA SCIF PED Policy, 25 Aug 06 (End Q18)). 

(9) (U/ /FOUO) Entry/Exit Inspection Programs. DCID 6/9 states that the CSA 
"shall prescribe procedures for inspecting persons, their property, and vehicles at the 
entry or exit points of SCIFs, or at other designated points of entry to the building, 
facility, or compound. The purpose of the inspection is to deter the unauthorized 
removal or classified material, and deter the introduction of prohibited items or 
contraband. This shall include determination of whether inspections are randomly 



6 (U) The 2/10 MTN Sensitive Compartmented Information Facility was a Tactical SCIF which is properly 
referred to as a T-SCIF. For purposes of this investigation, the relevant polices are the same for both T- 
SCIFs and SCIFs, except for the approval process. Because the overwhelming majority of references to 
the 2/10 MTN Facility is as a SCIF, this report references the 2/10 MTN facility as a SCIF. 
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conducted or mandatory for all, and whether they apply for visitors only or for the entire 
staff assigned." (DCID 6/9, 18 Nov 02, paragraph 2.7, 18 Nov 02 (End Q25)). The 
draft ODNI guidance for SCIFs states that SCIF SOPs should address "personnel and 
package inspection procedures." (T ech Spec, paragraph D.7 (End Q60)). DIA's policy 
as set out in the M-1 does not identify procedures for conducting entry/exit inspections. 
AR 380-5 states, w [t]he previous edition of this regulation required commands to 
establish a program to inspect for the unauthorized removal of classified information. 
Although this program, known as the Entry/Exit Inspection Program is, effective by this 
regulation, no longer a Department of the Army-wide requirement, it does remain an 
effective tool that can be used in command security programs to deter and detect the 
unauthorized removal of classified information." (AR 380-5, paragraph 6-36, 29 Sep 00 
(EnclQ11)). 

(10) (U//FQUO) Inspections and Staff Assistance Visits. The M-1 authorizes 
inspections or staff assistance visits (SAVs) to SCIFs, but does not require inspections 
or SAVs by higher headquarters after the initial accreditation inspection. "After initial 
security authorization, approval, certification, or accreditation, inspections will be 
conducted aperiodic (sic) or random (sic) and will be based on risk management 
principles." (DoD 5105.21-M-1, Chapter 1, paragraph M.2., Aug 98 (End Q24); DCID 
6/9, paragraph 2.3.3, 18 Nov 02 (End Q25)). The M-1 does require that units conduct a 
self-inspection at least annually. (DoD 51 05.21 -M-1 , Chapter 1 , paragraph M.1 , Aug 
98. (EnclQ24)). 

(11) (U//FGUQ) Training of SCI Physical Security Personnel. The M-1 charges 
DIA with establishing training for SCI Physical Security Personnel, but does not require 
attendance by SCI Physical Security Personnel at DIA training. (DoD 5105.21-M-1, 
Chapter 1, paragraph F.1.g., Aug 98 (End Q24)). The SIO has responsibility to ensure 
SSOs and SSRs receive training to perform their respective duties and responsibilities, 
but the amount and type of training is not specified. (DoD 51 05.21 -M-1 , Chapter 1 , 
paragraph F.4A, Aug 98 (End Q24)). DIA offers a 64-hour SSO training course (5 day 
residency with 2 prerequisite on-line courses), but there is no regulatory requirement for 
SSOs or SSRs to attend. In contrast, the SSR training at Fort Drum consisted onlyof a 
one-hour block of instruction coverin g more t han 100 slides. (DA Form 2823, BH| 28 
Jan 1 1 (End E17-2); DA Form 2823, |§| 6 Jan 1 1 (End E4-1)). 

c. (U/ /FOUO) 2/10 MTN SCIF Operations. When 2/10 MTN deployed to Iraq, it fell 
under the command and control of Multi-National Division-Baghdad (MND-B), 1st 
Cavalry Division (1CD). In January 2010, 1st Armored Division (1AD) relieved 1CD in 
place and assumed duties as USD-C, which repla ced both MND-B and the former Multi- 
National Fo rces-Wes t (MNF-W). (Interview MFR, H 24 Jan 1 1 (End E39-1 ); DA 
Form 2823, BBH 21 Jan 1 1 (End E27-1 )). 
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(1 ) (U/ /FOUO) Accreditation and Oversight of the 2/10 MTN SCIF. 

(a) (U/ /FOUO) Accreditation. The accreditation of 2/10 MTN's SCIF was in 
accordance with DoD and CENTCOM policies. (CCR 380-12, 1 Mar 05 (End Q50); 
CCR 380-3, Sensitive Compartmented information Access, 23 Oct 08 (End Q51); CCR 
380-1, Information Security Program Regulation, 1 Apr 07 (End Q52)). There is no 
indica tion that CENTCOM or USF-I failed to enforce a ccreditat ion policies. (DA Form 
2823, ■ |, 21 Jul 10 (End E58-1 ); Interview MFR, | | 24 Jan 1 1 (Enclosure 
E39-1 )^ne SIOs for CENTCOM and USF-I both have oversight responsibilities for 
SCI security programs within their organizations and are charged with implementing the 
applicable SCI policies. (DoD 5105.21-M-1, Chapter 1, paragraph F.4., Aug 98 (End 
Q24)). A review of theater policies showed that SCI policies were properly 
implemented. 

(b) (U/ /FOUO) Division Oversight. The Division G-2, as the SIO, exercises 
overall management of SCI programs within his organization. The Division SSO has 
responsibility to oversee SCI Security for subordinate SCIFs. Three separate 
organizations were responsible for oversight of 2/10 MTN SCI Physical Security during 
the investigative timeframe: 10th MTN DIV before Odober 2009; 1CD (MND-B) from 
October 2009 - January 2010; and 1AD (USD-C) from January 2010 - May 2010. 



(2) (U//FQUQ) 10th Mountain Division. As the p arent d ivision of 2/10 MTN , 10th 
MTN DIV provided SCI Physical Security training to 1 LT | I and SSG | | The 
SSO for 1 0th MT N, SSG B I p rovided a one-hour trainmg%lock, covering more than 
100 slides, to 1 LT HlandSSG (DA Form 2823, 1 | 28 Jan 11 (End 

E17-2); I nterview MFTTmW 25 Jan \ i (End E17-3)). On ZJune 2010, 1LTBH| 
and SSG | | were appointed as SSRs. Their appointment orders were vandDoth 
in garriso^mdin theater. By regulations, SSOs should be commissioned officers, 
warrant officers or civilian employees GS-9 or above. When questioned as to why SSG 

Hwas appointed as the SSO, Mr. | | the 10th Mountain Division rear- 
ment G-2, stated that his sedion was not manned appropriately. Three years 
ago, when the division only had 2 SCIFs, there were 4 enlisted Soldiers and 1 major 
performing security fundions. Today 1 cap tain and 2 enlisted Soldiers have 
responsibility for 8 SCIFs. (DA Form 2823, H 7 Jan 1 1 (End E87-1 )). 



(3) (U// FOUO) USD-C. 1CD conducted the accreditation inspedion. The 2/10 
MTN SCIF was accredited in November 2009. 1 AD did not conduct any inspedions of 
the 2/10 MTN SCIF. Neither 1CD nor 1AD conduded any training or appointment of 
SCI Physical Security Personnel, as the trainingand appointment had been done by 
10th Mountain Division. (DA Form 2823, 21 J an 1 1 (E nd E27-1); Interview 

MFR, ■ [24 Jan 1 1 (End E39-1 ); Interview MFR, ■■ ■ 24 Jan 1 1 (End E58-2); 
Email I 7 February 201 1 (041 )). This was in linewfthUSF-l's policy that SCI 

physi<^rsecunty personnel be trained prior to deployment. (USF-I J2 Memorandum, 21 
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Jan 11 End Q46)). The 1AD SSO stated that 1AD did not provide specific policies for 
brigades because "no BDE policies are needed since all guidelines are given in the 
DCID 6/9, (AR) 380-5, and the DoD 5105.21-M-1 and other security manuals." Further, 
the 1 AD SSO stated that no inspections were conducted because "we do not have the 
manpow er to go to these sites and randomly inspect T-SCIFs." (Interview MFR, 

I 24 Jan 1 1 (End E58-2)). Given the regulatory responsibilities of the SIO and 
SSOjnspections or SAVs of brigade SCIFs by Division SIOs and/or SSOs would be 
one way to enforce established SCI physical security polides. 

(a) (U// FOUO) Self-Inspections. The M-1 required units to conduct self- 
inspections at least annually. (DoD 5105.21-M-1, paragraph M(1), Aug 98 (End Q24)). 
There was no documentation of a self-inspection conducted by 2/10 MTN. (USF-I J2 
Memorandum, 21 Jan 1 1 (End 046)). However, the requirement is for annual self- 
inspections, and given the fact that 2/10 MTN's rotation in theater was less than 12 
months in duration, 2/10 MTN was not in violation of the policy. 



(b) (U//POUO) 2/10 MTNSSR. The designated Special Security Representative 
(SSR) for the SCIF was 1LlJHB| who was trained by the 10th MTN DIV SS O at Fort 
Drum. (DA Form 2823,lB«^an 11 (En d E4-1 ); DA Form 2823. 18 Jan 11 

(En d E28- 2); SSO Training Certificate - 1L1~m May 09 (End O20)TTs the SSR, 
1 LT | | was responsible for the day-to-day management and implementation of SCI 
secunt^or a SCIF that was located apart from, and with little oversight by, the higher 
headquarters. Therefore, she needed to be prepared to fulfill many of the 
responsibilities of the SSO. In contrast to the DIA's 64 hour long physical security 
course, her training was one hour in duration and consisted of a clas sroom lecture 
covering more tha n 100 P owerPoint slides. (DA Form 2823, |H| 6 Jan 11 (End E4- 



1); DA Form 2823, m 18 Jan 11 (End E28-2); SSR Training Slides (End 016)). 

(4) (U/ /FOUO) Othe^SRs. Both H-T^J and SSGHHIJ were on orders 

as S SRs, how ever, SSGHH| was not performing dutie s in tn^ CTF 
MFR,HH| 26 Jan 11 (End E57-3)). According to 1LTHH MSG 
assumecnn^hysical security responsibilities of the SCIF, while she w< 
resp onsible f or the personnel securi ty (i.e., verification of visitor's security dearance). 
MSG ■ I al so states "1 LTH I and I shared SCIF accreditation and admin duties." 
Form 2823B^B 15 JuM0(Er 




(DA Forrr^823l 1 15 Jul 10 (End E 1-5)) This assertion is supported to an extent 
by MAJ HBHH^nc^teted that MS q \ I took an active role in the physical 

security oHn^CIF. However, MAJB Tstated that 1 LT " 
was the SSR. (Interview MFR, | . JP?Han 10 (End E15- 
18 Jan 1 1 (End E28-2)). By all accounts, the physical security of the SCIF as it 
pertained to "outsiders" (i.e., personnel without prope r clearan ces), was conducted in 
accordance with applicable polides. (DA Form 2823, 1 I 5 Jan 1 1 (E85-1); DA 



iwg ii i ii \j\ ijoivscai 

not MSG ■ | 
5-T)TO Form 282^| 



Form, | | 6 Jan 1 1 (End E20-1 )). This AR 1 5-6 Investigation failed to uncover any 
evidencetna! any unauthorized personnel gained access to the SCIF or were present in 
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the SCIF unescorted. However, few to no SCI physical security measures were 
implemented with regard to SCIF personnel with authorized access. 

(5) (U//FOUO) Physical Security Layout. The layout of the SCIF was generally 
unremarkable. Figure 6 below is a drawing (not to scale) of the 2/10 MTN SCIF. 




SIPRNet Computers 



Conference TaWe 



TS/SCI Terminals 



□ 



NIPRNet Computer- 



r 



E/E 



Figure 6: SCIF, Room 14B, 2/10 MTN HQ, FOB Hammer, Iraq (U/ /FOUO) 

(a) (U//POUO) Entry/Exit. The entrance was secured by a cipher lock door and 
only personnel with authorized clearances were allowed into the SCIF unescorted. 
When personnel without proper security clearance or access had reason to be in the 
SCIF, SCIF personnel followed the proper procedures to sanitize the area to the 
appropriate level of clearance. (End 022). 

(b) (U//POUO) TS/SCI portion of SCIF. The portion of the SCIF where SCI was 
handled was separated from the collateral 7 side by a server room and a curtain hung in 
the doorway. Additionally, the computers with access to SCI information were all turned 
away from the doorway to preclude anyone from seeing the monitors if they entered the 



7 (U) The term "collateral" refers to any classified national security information not otherwise restricted by 
program or a compartment. The level of classification is distinct from whether that information is collateral 
or not; not all SCI is necessarily TS. 
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room. There is no evidence that PFC Manning accessed any informatio n from a SCI 
computer terminal. (USF-I 1 5-6 investigation (End R1); DA Form 2823 , Mi 15 Jul 
10 (End E1- 9); DA F orm 2823, ■■ 14 Jun 10 (End E47-2); AIR, || 20 Oct 10 (End 
E31-1); AIR, HH 5 Oct 10 (End E62-1)). 

(c) (U/ /FOUO ) Rewritable Media. Rewritable Media were allowed in the SCIF for 
mission purposes only. Rewritable Media were necessary in order to transfer 
information from networked SIPRNet computers within the SCIF to interpreters who had 
security clearances and an official requirement for the information and who worked on 
stand-alone classified comput ers, and to share appropriate information with Iraqi 
counterpart s. (DA Form 2823, ■■■ 6 Jan 1 1 (E nd E46- 1); DA Form 2823, 

20 Jan 11 (End E26-3); DA Form 2823, HJ9| 10 Jun 10 (End E1-5)). 
Tn^Iacement of rewritable media into or on a SIPKNetcomputer, however, should 
have resulted in the media itself being labeled as classified and treated as such. (AR 
25-2, paragraph 4-17, 24 Oct 07 (End Q3)). However, Soldiers who worked in the SCIF 
were allowed to bring personal music CDs into the SCIF in violation of the P I A SCIF 
PED Policy. (DIA SCIF PED Policy, 26 Aug 06 (End Q18); (DA Form 2823, BHHI 
20 Ja n 11 (End E26-3); DA Form 2823, HEH 10 Jun 10 < Encl E1 " 5 ))- According to 
CW2 HBfllfl the ma j° rit y of CDs brougnHnto the SCIF were factor y music CDs 
which were non-rewritable media. When interviewed, CW2Qm stated that some 
inspections were conducted to ensu re that Sold iers did not have personal rewritable 
media in the SCIF. (DA Form 2823, HHHH 20 Jan 1 1 (j=n£^26-3)). However, no 
other witness corrobora tes thi s statemenMDA Form 2823, H^flH 21Jan 1 1 (End 
E65-1 ); DA Form 2823, ■■7Jan 1 1 (End E44-2); DA Form2823, ■■■ 6 Jan 1 1 
(End E46-1); DA Form Z&TWgM 10 Jun 10 (End E1-5)). At the Division SCIF, 
personnel were not allowed to ^sterHo music or watch movies on the SCIF computers. 
Any personnel seen wearing headphones were questioned. (Interview MFR, 
24 Jan 11 (End E39-1 )). 

d. (U//POUO) Compromise of Physical Security by PFC Manning. Based on the 
evidence available to this investigation, particularly PFC Manning's excerpted Internet 
Relay Chat logs with hacker Adrian Lamo, PFC Manning allegedly downloaded 
classified information onto his SIPRNet computer, removed that information from his 
workplace and transferred that information to persons not entitled to receive classified 
information. 

e. (U//l=OU©) According to chat logs PFC Manning noted that: "people stopped 
caring after 3 weeks;" "there was no physical security;" "it was a massive data spillage . 
. . facilitated by numerous factors . . . both physically, technically, and culturally . . . 
perfect example of how not to do INFOSEC;" tt [l] listened and lip-synched to Lady 
Gaga's Telephone' while exfiltrating possibly the largest data spillage in American 
history." He also made the following observations: "weak servers, weak logging, weak 
physical security, weak counterintelligence, inattentive signal analysis." (USF-I AR 15-6 
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(End R1)). PFC Manning referred to the circumstances in the SCIF as "a perfect 
storm." (USF-I AR 15-6 (End R1)). 

2. (U//FOUO) Comprehensive Security Resiliency Concept. During this investigation, 
the investigative team was briefed on the Army G-2's "Comprehensive Security 
Resiliency" concept. As explained to the team, the Army G-2's current "Comprehensive 
Security Resiliency" concept aligns the DA Personnel Security, Counterintelligence, and 
Security Education Training and Awareness Program in a comprehensive program that 
will address program shortfalls and ensure a Security Resiliency Posture in the U.S. 
Army. "Comprehensive Security Resiliency" is relevant to this investigation and the 
shortfalls it identifies. Key elements of "comprehensive security resiliency" include: 
leveraging the personnel security program authorities, which establish a model for 
Soldier standards and accountability; security education, training, and awareness 
programs; leveraging automation and technology to implement a continuous evaluation, 
monitoring, identification and reporting of security and counterintelligence concerns; and 
use or implementation of a security risk rating tool to aid commanders and others in 
security decisions. (Army G-2 MFR, 28 Jan 11 (End 04)). 
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Section IE: Behavioral Health 

1. (U/ /FOUO ) Command vs. Self-Referral to Behavioral Health. A Soldier can receive a 
behavioral health evaluation or treatment in one of two ways: 1) the Soldier refers him 
or herself to Behavioral Health (also referred to as Community Behavioral Health or 
Combat Stress Clinic (CSC)); or 2) the Soldier is directed to Behavioral Health by his 
commander. The former is commonly referred to as "self-referred" evaluation or "self- 
referral" and the latter as a "command directed" evaluation. (DoDD 6490.1 Mental 
Health Evaluations of members of the Armed Forces, 1 Oct 97 (End Q36); MEDCOM 
Reg 40-38 (End Q35), "Command Directed Mental Health Evaluations," revised 1 
September 2001: MEDCOM CJA Info Paper, 15 Sep 10 (End 017)). The term 
"behavioral health" is the same as, and may be used interchangeably with "mental 
health." 

a. (U//FOUO) Triggers for Referrals. In the case of a self-referral, a Soldier makes 
an appointment with his behavioral health care provider and the information exchanged 
between the Soldier and provider is, in most instances, confidential (i.e., Protected 
Health Information or PHI). In the case of a command-directed behavioral health 
referral, the Solder's chain of command directs the Soldier to see Behavioral Health. 
The command-directed evaluation can be based on a concern for the Soldier's well- 
being; a concern related to the good order and discipline of the unit; or because another 
regulation or directive mandates a behavioral health evaluation. An example of the 
latter is AR 635-200, the administrative elimination (separation) regulation applicable to 
enlisted personnel. AR 635-200 directs the conduct of a behavioral health evaluation 
prior to the initiation of particular types of separation actions— the decision to direct a 
behavioral health evaluation is non-discretionary on the part of the command. (DoDD 
6490.1, 1 Od 97 (End Q36); DoDI 6490.4, Requirements for Mental Evaluations, 28 
Aug 97 (End Q37); MEDCOM Reg 40-38, Commander-Directed Mental Health 
Evaluations, 1 Jun 99 (End Q35); DoD 6025. 18-R, January 2003 (End Q38); AR 635- 
200, Active Duty Enlisted Administrative Separations, 6 Jun 2005 (End Q27)). 

b. (U/ /FOUO ) Behavioral Health Care Providers and Confidentiality. As a general 
rule, communications between a Soldier and a behavioral health care provider during a 
self-referred visit are confidential (i.e., PHI). (MEDCOM Info Paper, HIPAA and 
Commander's Access to Soldier's Proteded Health Information, 15 Sep 10 (End 017)). 

(1) (U//J=OUQ) Self-Referral. The rule of confidentiality applies to self-referral in 
most situations. However, there are seven exceptions to this confidentiality policy set 
forth in Undersecretary of Defense Diredive Type Memorandum 09-006, July 2, 2009 
(DTM 09-006) (End Q39). DTM 09-006 states that in cases of self-referral, a health 
care provider shall . . . [njotify a commander when a member presents with a behavioral 
health condition in [the following] circumstances: 
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(2) (U//F©y©) Harm to Self. The provider believes there is a serious risk of self- 
harm by the member. 

(3) (U//FOUO) Harm to Others. The provider believes there is a serious risk of 
harm to others. This includes any disclosures concerning child abuse or domestic 
violence consistent with DoDI 6400.06 (End Q40). 

(4) (U/ /FOUO ) Harm to Mission. The provider believes there is a serious risk of 
harm to a specific military operational mission. Such risks may include disorders that 
significantly impact impulsivity, insight and judgment. 

(5) (U//FOUO) Special Personnel. The member is in the Personnel Reliability 
Program (DoDI 5210.42 (End Q41)) or is in a position that has been pre-identified by 
Service regulation or the command as having mission responsibilities of such potential 
sensitivity or urgency that normal notification standards would significantly risk mission 
accomplishment. 

(6) (U/ /FOUO ) Inpatient Care. The member is admitted or discharged from any 
inpatient behavioral health or substance abuse treatment facility. 

(7) (U/ /FOUO ) Acute Medical Conditions Interfering With Duty. The member is 
experiencing an acute behavioral health condition or acute medical regimen that impairs 
the member's ability to perform his or her duties. 

(8) (U//PQUO) Substance Abuse Treatment Program. The member has entered 
into a formal outpatient or inpatient treatment program consistent with DoDI 1010.6 for 
the treatment of substance abuse or dependence. Those who seek alcohol-use 
education, who have not had an alcohol referral incident (such as arrest for driving 
under the influence) do not require command notification unless they also choose to be 
formally evaluated and are diagnosed with a substance abuse or dependence disorder. 

(9) (U//F©y©) Command-Directed Behavioral Health Evaluation. In the case of 
a command-directed behavioral health evaluation, a commander can request that the 
behavioral health care provider address specific concerns about and observations of a 
Soldier by describing those concerns and observations as part of the process that 
occurs before the provider sees the Soldier (MEDCOM Reg 40-38, Commander- 
Directed Behavioral Health Evaluations, 1 Jun 99 (End Q35)). After evaluating the 
Soldier, a behavioral health care provider gives the chain of command the Soldier's 
prognosis, diagnosis and the provider's recommendations for the Soldier, recording 
these elements of information on DA Form 3822^AR 40-66, paragraph a(3)(c), 4 Jan 
10 (End Q 64)). However, recall that CPIJgKUUH evaluated PFC Manning using 
"MEDCOM Form 4038." (DA Form 2823, ■ ■ 18 Jan 1 1 (End E17-2). Although 
"MEDCOM Form 4038" provides a detaile^valuation of the Soldier, MEDCOM never 
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formally approved this for m for official use thr oughout the Behavioral Health community 
(MEDCOM Email from Ms. BEHHH| |, 21 Jan 11 (End 043)). Unlike the 
"MEDCOM Form 4038," th^5CTorrT^82^ontains no reference whatsoever to the 
suitability of the Soldier for continued access to classified information. Because 
"MEDCOM Form 4038" remains an informally generated, unapproved form and it has 
never been generated in a tillable format, behavioral health care providers can delete 
blocks and the accompanying information at their discretion. Note that I did not attempt 
to determine the extent to which the "MEDCOM 4038" is currently being used in the 
field — clearly it was used by the behavioral health care providers who treated PFC 
Manning, however. 

(10) (U//FOUO) In the case of a command-directed Behavioral Health 
evaluation, the chain of command must ask the provider specifically to opine on the 
security clearance of the Soldier in question; otherwise, the behavioral health care 
provider is not obligated to advise the chain of command on that issue. Some examples 
of questions commands may pose include: 

(a) (U//FOUO) Does the Soldier have a behavioral health condition that is 
contributing to current difficulty? 

(b) (U/ /FOUO ) What is the potential for the Soldier to return to full functioning 
given successful treatment? 

(c) (U//FOUO) Is the Soldier suitable for carrying a weapon at the current time? 

(d) (U//FOUO) Is it appropriate for the Soldier to have access to classified 
information? 

(e) (U/ /FOUO ) Is the Soldier qualified for deployment? 

2. (U//FOUO) Behavioral Health Issues and Security Clearances. A review of the 
references cited in DTM 09-006, as well as other regulations, policies and information 
papers related to behavioral health evaluations and treatment reveals that only one 
source addresses access to classified information, DoDD 5210.42. (DoDD 5210.42, 
June 2006 Incorporating Change 1, (10 Nov 09), Nuclear Weapons Personnel 
Reliability Program (PRP), paragraph. 3.7. (End Q41)). That said, this Directive's 
discussion of classified information occurs in the context of requiring a clearance to 
perform nuclear weapons duties, and fails to otherwise address the relationship 
between the findings of a behavioral health evaluation and the award of, or continued 
access to, a clearance. (DoDD 5210.42, paragraph 3.7. (End Q41)). 

a. (U//FOUO) Review of Regulations and Policy. The statutes, Code of Federal 
Regulations (CFR), Directives, Instructions, Regulations and policies applicable to 
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determining the nature and quantity of information that may be disclosed to the chain of 
command by a behavioral health care provider at the conclusion of a Soldiers 
behavioral health evaluation are consistent in one respect - they are silent on the issue 
of a Soldier's access to classified information after undergoing a behavioral health 
evaluation, whether self- referred or command-directed. Beyond a limited discussion of 
classified material in DoDD 5210.42, none of the references reviewed by this 
investigative team and cited in the footnote below, establish a requirement for a 
behavioral health care provider to assess, or, in the alternative to recommend that the 
chain of command assess, whether the Soldier undergoing evaluation should be 
permitted to access classified information. 8 

b. (u//f=©UO) Serious Risk. 

(1 ) (U/ /FOUO ) With regard to self-referrals for behavioral health evaluation, the 
provisions of DTM 09-006 (Q-39), Attachment 2, focus on whether the Soldier is a 
serious risk to self, others or the mission, with the degree of mission risk being a 
discretionary call on the part of the provider. Also of note is that the risk posed by the 
Soldier to self, others or the mission must be "serious" to warrant reporting to the 
Soldier's chain of command. Thus, only when the behavioral health care provider 
deems the risk posed by the Soldier to be "serious" will the command be informed and 
afforded the option under AR 380-5 to suspend the Soldier's access to classified 
information and to determine whether a derogatory report should be forwarded to CCF 
for a determination of whether the Soldier remains suitable for access to classified 
information. 

(2) (U//FOUO) Behavioral Health Care Provider Report to Command. When a 
provider believes the Soldier presents a "serious" risk, the provider reports that finding 
to the command. The command, not the provider, has the authority to take action to 



8 (U) These references include Title 10, United States Code, § 1034 (Protected communications; 
prohibition of retaliatory personnel actions); Public Law 102-484 (HR 5006), National Defense 
Authorization for Fiscal Year 1993, October 23, 1992; DoD 6025. 18-R, DoD Health Information Privacy 
Regulation, January 2003; DoD1 1010.6, Rehabilitation and Referral Services for Alcohol and Drug 
Abusers, March 13, 1985; DoDI 6025.18, Privacy of Individually Identifiable Health Information in DoD 
Health Care Programs, December 2, 2009; DoDI 6400.06, Domestic Abuse Involving DoD Military and 
Certain Affiliated Personnel August 21, 2007; DoDI 6490.1, Mental Health Evaluations of Members of the 
Armed Forces, 1 Oct 1997; DoDI 6490.4, Requirements for Mental Health Evaluations of Members of the 
Armed Forces, 28 Aug 1997; Directive-Type Memorandum (DTM) 09-006, Revising Command 
Notification Requirements to Dispel Stigma in Providing Mental Health Care to Military Personnel, July 2, 
2009; AR 40-66, Medical Record Administration and Health Care Documentation, 1 7 June 2008; 
MEDCOM Regulation No. 40-38, Command Directed Mental Health Evaluations, September 2001; 
OTSG/MEDCOM Policy Memorandum 10-042, Release of Protected Health Information (PHI) to Unit 
Command Officials, 30 June 2010; and MEDCOM CJA Information Paper, HIPAA and Commander's 
Access to Soldier's Protected Health Information, 1 5 September 201 0. 
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suspend, or initiate action to revoke, a Soldier's security clearance whenever it 
perceives the Soldier might compromise security. This broad standard gives a 
command significant leeway in terms of when and under what circumstances it is 
permitted to suspend a Soldier's access to classified information. DoD 6025.1 8-R 
allows for the release of PHI to "[c]ommanders who exercise authority over an individual 
who is a member of the Armed Forces, or other person designated by such a 
commander ... in order to carry out an activity under the authority of the commander. " 
(DoD 6025.1 8-R, paragraph C7.11.1.2.1., Jan 03 (End Q38)). Because commanders 
are responsible for taking action to suspend a Soldier's access to classified information 
or to submit DEROGs to CCF in certain circumstances, they should be given relevant 
information from providers that address a Soldier's "fitness for duty," "fitness to perform 
any particular mission," and "fitness to carry out any other activity necessary to the 
proper execution of the mission of the Armed Forces." DoD 6025.1 8-R, paragraph 
C7.11.1.3., January 2003 (End Q38)). 

3. (U/ /FOUO ) PFC Manning's Behavioral Health. A review of PFC Manning's Medical 
and Behavior al Health records and three comprehensive MFRs authored by the S-2 
NCOIC, MSG HHH documenting PFC Manning's behavioral health issues over the 
period from 28 Marcn 2008 through 28 May 2010, reveal multiple behavioral health- 
related events. PFC Manning's additional consultations with behavioral health care 
providers subsequent to his apprehension are not addressed in this report for several 
reasons: (1) they were initiated primarily to determine how PFC Manning was handling 
incarceration and his risk of suicide; and (2) these assessments have no relevance to 
the alleged compromise of classified information because PFC Manning had neither 
access to nor the ability to disclose classified information after his 27 May 2010 
apprehension. 

a. (U//FQy©) Sequence of Events. An enumeration of PFC Manning's behavioral 
health related events/consultations in the 26 months preceding his apprehension 
follows: 

28 March 2008 - Command-Referred (Tantrum and Fits of Rage), FLW. 

30 June 2009 - Self-Referred at urging of NCOIC. Diagnosed with 



1 5 September 2009 - Self-Referred (Difficulty doing what he is supposed to do); 



follow up as needed. (3! 
Drum. 

- Self-Referred for ("Losim 




■released without limitations . . . 
"n 09 SF 600 (End M1-2)), Fort 



19 August 2009 
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(6 . (b) (7)(C) 



released without limitations." (SF 600, 15 Sep 09 (End M1- 
4)), Fort Drum. 

23 September 2009 - States Command-Referral but appears to be Self- Referral 

based on advice of someone in chain of command; 



;t» (6). (b) (7)(C) 



■ released without limitations." (SF600, 
z^eptjgTEncTMI-S)), F ort Drum. 
29 September 2009 - Self-Referred (Follow Uf 



teleased without limitations . . . Provider 
;omment: "He is doing fine." (SF 600, 29 Sep 09 (End M1- 
6)), Fort Drum . 

NCOIC (MSGiM| MFR highlighting behavioral health 
issues ■Hjprepared MFR, 21 Dec 09 (End E1-1)), Iraq. 
Comman^Referred (Table Flipping Inciden t in SCIF). 

~ Released 

without limitations 

)ec 09 (fcnci Mi -8)), Iraq. 
;ommand-Referred. "MEDCOM Form 4038" for bove 
incident noted PFC Manning was I 



21 December 2009 

24 December 2009 

25 December 2009 



(b) (6). (b) (7)(C) 



30 December 2009 
6 January 2010 
16 February 2010 
2 March 2010 
16 March 2010 




iock / - unsuitably for Access to Classified 
Information / Clearance ( Unchec ked), (MEDCOM Form 
4038, 25 Dec 09 (MM); Prepared MFR, 21 Dec 09 

(End EM)), Iraq. 

Follo^U^Followin SCIF Incident). 

I Released without limitations. (SF 
6oOn5en)9(ErW Iraq. 
"Referral from Previous provider." (Contin ued Peer Issues). 

Released without 
limitations. (SF 600, 6 Jan 10 (EncI M1-f1)), Iraq. 
SchedulecHollowu^ to 
people). ng^guHM ■ Released 

without limitatio^^ Irac 
Scheduled follow up (Continued Treatment). 

Released without limitations. 
11-13)), Iraq. 

(Continued Work place Issues). 

Released without 
M1-14)), Iraq. 





lar 10 (tnci 
Scheduled follow 
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23 March 2010 
30 March 2010 

6 April 2010 
26 April 2010 

7 May 2010 



8 May 2010 
8 May 2010 



8 May 2010 



SchedulecHolto 



- Scheduled follow u 




Continued Wor kplace Issues). 

Released without 
ncl M1-15)), Iraq. 
Continued Workp lace Is sues). 

Released 
ar 10 (bnci M1-16)), Iraq. 
tontinuedWo^ Issues). 

_ il Released without 
imitations. (Sh , WpM^tncTOl-17), Iraq. 
NCOIC (MSGHH MFR hrahliqhting continued 
behavioral healtr^oncems. HHl P re P ared MFR > 26 A P r 
10 (End E1 -2)), Iraq. 

Scheduled follow up (Dismay over tt Current Situation") 



witnout limitations 
Scheduled follow up 




teleased with wo 
misprinfas the date of this a 
Manninc^ssaulted SPC 
and Dr. BBBauthore 



li^appointnr 
^nesenol 



uty Limitations. (May be a 
ointm ent was 7 May 10. PFC 
on the night of 7-8 May 
eson 12 May 10). (SF 



600,7 

Assault on SP' 
NCOIC (MS 
behavioral hea 



:ncl M1-20 )), Iraq. 

in SCIF, Iraq, 
highlighting continued 
concerns. HH| prepared MFR, 8 May 
10 (End E1-3)), I raq. 

(Assault on SPC BB9 I " NC0,C brought him in at 
01 30 because SMna^thJck another SM in the jaw " 




10 May 2010 



12 May 2010 




win remain on 
unit watcn until such time as this clinic releases him. 
Released with work/duty limitations. (SF 600, 8 May 10 
(End M1-20)), Iraq. 

Scheduled follo w up (Post Assault Therapy, PFC Manni ng 
now in Supplv 




Released with work/duty 
limitations. (SF 600, 10 May 10 (End M1-21)), Iraq. 
Scheduled follow up (40 Minutes Late to Appointment, 
rescheduled). (SF 600, 12 May 10 (End M1-22)), Iraq. 



55 

UNCLASSIFIED// FOR OFF I CIAL USE ONLY 



UNCLASSIFIED// EQR OFF I C I AL USE OMUY 



ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



13 May 2010 



Scheduled follow up (A nxiety about "Future" in the Army and 
"Recent Revelations"). " 



15 May 2010 



19 May 2010 
22 May 2010 



26 May 2010 



28 May 2010 
28 May 2010 



Released wit 
lay 10 (End M1-23)), 



- Scheduled follow up (Anxiety about "Future" in the Army). 




teieased with work/duty limitations, 
lay 10 (End M1-24)), Iraq. 
Scheduled follow up (Late to Appointment / Re-Scheduled). 
(SF 600, 19 May 10 (End M1-25)), Irac 
Command-Referred (Assault on SPC V 
"MEDCOM Form 4038" noted PFC Manning wasl 





r JPP" 

:OM Form 



Block 7 - Unsuitability for Acc ess to 
lassified Information / Clearance (Deleted). CPT ]~ 
removed block 7 from the Word File of the "MEDCc 
4038" because he thought the issue of PFC Manning's 
access to secret materials was "moot" because PFC 
Manning was restricted from the SCIF. K^DpffiflBMFR, 25 
Jan 1 1 (End E17-3), SF 600, 22 May 1 (T(EncrM^6)). 
Recommended PFC Manning be chaptered out under 
provisions of AR 635-200, paragraph 5-17, Behavioral 
Disorder. Released with work/duty limitations. Iraq. 

Scheduled follow up (Post Article 15-Reduction Visit. 

Discussing Pending Separation from the Army). 




Released without limitations. (SF 600, 26 May 10 
T-28)), Iraq. 

Scheduled follow up. (SF 600, 28 May 10 (End M1-29)), 
Iraq. 

Command-Referred ("MEDCOM Form 4038"). Deemed a 
potential high risk of harm to self or others and No longer 
Suitable for Access to Classified Information / Clearance. 
("MEDCOM Form 4038", 28 May 10, SF 600, 28 May 10 
(End M1-29)), Iraq. 
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b. (U//FOUO) "MEDCOM Form 4038" (End Q26). As stated above, the DA Form 
3822, Report of Mental Status Evaluation, is the official DA Form approved for use by 
behavioral health care providers. "MEDCOM Form 4038" was developed a few years 
ago at Triplei^rm Center, Hawaii and was used locally. (MEDCOM Email 

from Ms.DHQH^H, 21 Jan 11 (End 043)). Of the above listed behavioral 
health-relate^venfs^niy three were documented in a completed "MEDCOM Form 
4038." Of the three "MEDCOM Forms 4038," only th e last in tim e, completed on 28 
May 2010, following PFC Manning's assault on SPC| J noted that PFC 
Manning lacked suitability for continued access to classmecnnformation and that he 
should not have a clearance. 
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SECTION II: Regulations, Policies and Facts 
Pertaining to Information Assurance 

1. (U/ /FOUO) Information Network Background. The Wikileaks incident prompting this 
AR 15-6 Investigation occurred within the Iraq Joint Operating Area (IJOA), and in the 
U.S. Central Command (CENTCOM) Area of Responsibility (AOR). Pursuant to the 
provisions of CENTCOM Regulation (CCR) 25-206, paragraph 2-3, networks in the 
IJOA were under the command authority of Commander, CENTCOM. CENTCOM 
delegated the operation and maintenance of the IJOA network to USF-I and its 
subordinate organizations. (CCR 25-206, chapter 2, paragraph 2-3. a., undated (End 
Q2)). 



2. (U) Information Assurance Personnel. 

a. (U/ /FOUO) Supervisory authority for 
the network flowed along command lines 
from CENTCOM to USF-I to USD-C to 2/10 
MTN. Supervisory responsibilities for 
information assurance (IA) vary at each 
echelon of command, but generally include at 
least a Designated Approval (or 
Accreditation) Authority (DAA) 9 and an 
Information Assurance Manager (lAM). IA 
duties may be performed as primary or 
additional duties by a DoD employee (civilian, 
including local nationals, or military) or by a 
support contractor. All duty positions have 
both preparatory and sustaining DoD IA 
training and certification requirements. 
Figure 7 shows the echelons of the 
information assurance workforce from the 
CENTCOM down to 2/10 MTN 



BG Donahue 
CENTCOM J6 
Tier 1/CENTCOM DAA 


USCENTCOM 


1 
1 


cent^^^Ra 

AOR-wkta 1AM few CCHQ 


CENTC^WlA 

1AM for CCHQ and CFH 


ROML Simpeon 

USF-I J6 
Tier 2/UOA DAA 








USF-I 




Mr.HB 

USF-I jl^fffcND 
Tier 2/UOA 1AM 







MND-B/USD-C 




Figure 7. IA Echelons (U//FOUO) 



b. (U/ /FOUO) Designated Accrediting 
Authority (DAA). DoD requires that a DAA be a U.S. citizen, a DoD employee, and 
have a level of authority commensurate with accepting, in writing, the risk of operating 
DoD information systems (IS) under his or her purview. (DoDD 8500.01 E, paragraph 
4.25, 24 Oct 02 (End Q1)). CENTCOM prescribes a minimum grade for the DAA as at 
least 0-6/GS-15, and similarly requires vesting the DAA with a level of authority 
commensurate with accepting, in writing, the risk of operating all IS under their 



9 (U) The terms Designated Accreditation Authority is replacing Designated Approval Authority in 
practice. 
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jurisdiction. (CCR 25-206, chapter 7, paragraph 7-5, undated (End Q2)). The Army 
further requires that a DAA be a General Officer, member of the Senior Executive 
Service, or an equivalent level, regardless of the confidentiality level at which the IS 
operates. The Army prohibits further delegation of this appointment or downward 
appointment of DAAs except as set forth in AR 25-2 or as approved by the Army 
CIO/G-6. (AR 25-2, chapter 5, paragraph 5-8.h., 24 Oct 07 (End Q2)). In other words, 
DAA signature authority must remain in the person appointed as the DAA by the CIO/G- 
6. Prior to performing the duties of DAA, the designated individual must complete DAA 
Basics Computer Based Training; meet the training and certification requirements 
established in National Security Telecommunications and IS Security Committee 
Instruction (NSTISSI) 4012, National Training Standard for DAA, dated August 1997; 
and be appointed, by name, as DAA by the Army CIO/G-6. (AR 25-2, chapter 3, 
.paragraph 3-3(m), 24 Od 07 (End 02)). 

(1 ) (U//FOUO) The CENTCOM J6 diredor, BG Brian Donahue, is the DAA for 
the Tier 1 (theater) architecture in the CENTCOM AOR, and has authorities for all IS in 
the AOR, except for the Intelligence Community (IC) or to Combat Support Agencies. 
(CCR 25-206, chapter 2, paragraph 2-5(a), undated (End Q2)). 

(2) (U//FOUO) The USF-I Deputy Chief of Staff, Chief of Information Systems 
(DCS CIS) is the DAA for the IJOA. (MNF-I Diredive 25-1 , paragraph 6.1 ., undated 
(End Q4)). The MNF-I staff renamed the DCS CIS as the DCS, CJ6, who at the time of 
the inc ident was Rear Admiral (Lower Half) (RDML) David Simpson. (DA Form 2823, 
■||, 24 Jan 1 1 (End E91-1)). The USF-I DAA had responsibilities similar to that of 
ni^ounterpart at CENTCOM, and exercised DAA responsibilities over all non- 
Intelligence Community IS in the IJOA, including those of USD-C and its subordinate 
units. (USF-I Directive 25-1, paragraph 2-8 and 3-2, undated (End Q5)). 

c. (U//POUO) Designated Certification Authority. Pursuant to MNF-I Directive 25-1, 
the DAA for the IJOA may appoint a Designated Certification Authorities to ensure IA 
and computer network defense (CND) program implementation in the IJOA (MNF-I 
Diredive 25-1, paragraph 6.1.2.9, undated (End Q4)). These designated certification 
authorities approve local issues delegated in writing to them and support the 
enforcement of security polides and best security pradices in their assigned areas 
(MNF-I Diredive 25-1 , paragraph 8.2, undated (End Q4) Where were no designated 
certification authorities appointed below the DAA (Email, HHH 9 Feb 1 1 ( Encl O 45 ))- 

d. (U/ /FOUO) Division G-6/Brigade S-6. Although not specifically designated as a 
key I A position, the G-6/S-6 exercises overall authority and responsibility for all network 
operations within his unit's assigned area of operations. The G-6/S-6 works closely with 
the higher J6/S-6 and subordinate S-6 officers, and the assodated signal units to 
monitor and manage the adivities that provide data confidentiality, integrity, availability, 
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and protection against unauthorized access. (FM 6-02.71, paragraph 3-53, 14 Jul 09 
(End Q6)). The responsibilities for a G-6/S-6 do not appear in AR 25-1 or AR 25-2. 

( 1 ) (U// FOUO) The 1CD G-6 was LTC MJMMM^ (Interview M FR, 
ijjfflgflM 24 Jan 11 (End E34-1)). The 1AD G^wa^c] |. (USF-I 
AR380-5, Enclosure 13 (End R1)). 

(2) (U/ /FOUO) The 2/10 MTN S-6 was MAjQgm^. (USD-C 380-5, 
Enclosure L (End R2)). 

e. (U/ /FOUO) Information Assurance Manager (IAM). Both CENTCOM and the 
Army require lAMs to be appointed on orders. The IAM is responsible to execute an 
organization's IA security program on behalf of the DAA. Organizationally, the IAM 
.reports directly to the DAA in executing his IA duties. The IAM must be a U.S. citizen, 
an employee of the U.S. Government, hold a U.S. Government security clearance, and 
possess access approvals commensurate with the level of information processed by the 
system under his or her jurisdiction. IAM training and certification requirements vary 
with the size and scope of the network and systems under their purview. (CCR 25-206, 
paragraph 7-5.C, undated (End Q2); AR 25-2, chapter 3, paragraph 3-2.d., 24 Oct 07 
(End Q3)). The IAM is responsible for developing and enforcing a formal IA security 
and training program. (CCR 25-206, paragraph 7-5.c, undated (End Q2); AR 25-2, 
paragraph 3-2.d., 24 Oct 07 (End Q3)). For Army units, the IAM is required to conduct 
security inspections, assessments, tests, and reviews, including subordinate units (CCR 
25-206, paragraph 7-5.C, undated (End Q2); AR 25-2, paragraph 3-2.d., 24 Oct 07 
(End Q3)). For Army units, the IAM is required to identify data ownership (including 
accountability, access, and special handling requirements) for each IS or network within 
their authority (CCR 25-206, paragraph 7-5.C, undated (End Q2); AR 25-2, paragraph 
3-2.d., 24 Oct 07 (End Q3)). For Army units, the IAM is also required to verify that all 
the computers under their oversight are properly certified and accredited in accordance 
with DoD Information Assurance Certification and Accreditation Process (DIACAP) and 
USF-I configuration management policies and practices. (CCR 25-206, paragraph 7- 
5.c, undated (End Q2); AR 25-2, paragraph 3-2.d., 24 Oct 07 (End Q3)). 

(1) (U/ /FOUO) CENTCOM allows the DAA or the commander to appoint an IAM. 
Army regulation allows only commanders to appoint lAMs for their designated networks. 
(CCR 25-206, chapter 7, paragraph 7-5c, undated (End Q2); AR 25-2, paragraph 3-2d, 
24 Oct 07 (End Q3)). The Army's IAM training standards refer back to the standards in 
DoD 8570.01-M. (DoD 8570.01-M, chapter 4, 19 Dec 05 (End Q7)); AR 25-2, chapter 
4, paragraph 4-3.a.(3), 24 Oct 07 (End Q3)). 

(2) (U/ /FOUO) CENTCOM had two lAMs. The CENTCOM IAM with specific 
responsibilities for the CENTCOM headquarters (CCHQ) at MacDill AFB, FL, and the 
CENTCOM Forward Headquarters (CFH) at Al Udeid Air Base, Qatar, at the time of 
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PFC Manning's deployment was Ms jSuSUMMSSM rhe IAM with AOR-wide 

responsibilities, less the CCHQ and (Th^^Tc ||^|^^ |. (Email |" 
24 Jan 11 (EnclQ8)). 



(3) (U//FQUQ ) The USF-I IAM in mid-2010 was Mr. HHHH* vtfioreported to 
LTCHH^^HH, USF-I J6-lnformation Assurance Divisior^nier Mr MH had 
allcK^te^uppor^taff throughout the IJOA to assist division-level IA personnel This 
supp ort staff a lso served as subject matter experts for the division G-6 staffs. (DA Form 
2823, ^■■24 Jan 11 (End E91-1)). 




(4) (U/ /FOUO) MAJ ■H|U| served as the IAM for 1CD as MND-B, which was 



later des ignated USD-C. (Interview MFR, 24 Jan 11 (End E21-1)). MA JH 

was the IAM for USD-C after 1 AD took over from 1CD. (Interview MFR^^ 
,23 Jan 11 (End E36-1)). 

(5) (U/ /FOUO) CPTBHHHH^H the FA 53, Information Management 
Systems Officer assigned t^2/1^MTN^mvea at Fort Drum on 1 October 2009, shortly 
after graduating from the FA 53 Information Systems Management course. He 
deployed into theater on 14 November 2009, after 2/10 MTN's Transfer of Authority 
with the re-deploying 3d BCT of the 82d Airborne DivisiorWD^orm 2823, 
6 Jan 11 (End 13-5)). Upon arrival in theater, CPT jgJJQMgl assumed 
Ihe 2/10MT N IAM. (DA Form 2823, HHBH 6 Jan 1 1 (End 13-5)). This 
was CPTmi first assignment as a FA b^rncer and his first deployment. He 
received som^Mraining in the FA 53 course. However, the training was primarily 
focused on commercial best business pr actices rathe r than on the specific duties of an 
IAM a t the tadica l level. (Interview MFR, HH| 23 Jan 1 1 (End E13-7); DA Form 
2823, WSMlM 6 Jan 11 ( Encl E13-5)). 




f. (U/ /FOUO) Information Assurance Network Manager (IANM). The Army 
authorizes the position of IANM in AR 25-2. (AR 25-2, paragraphs 3-2c and e, 24 Oct 
07 (Encl Q3)). An IANM must be appointed on orders by the commander, be a U.S. 
citizen, and hold a U.S. Government security clearance and access approval 
commensurate with the level of responsibility. The Army's IANM training and 
credentialing standards follow the Information Assurance Technical (IAT) Level I and II 
standards established in DoD 8570.01 -M. (DoD 8570.01 -M, 19 Dec 05 (Encl Q7)). AR 
25-2, paragraph 4-3(a)2 enumerates the training requirements for the IANM. (AR 25-2, 
24 Oct 07 (Encl Q3)). 

g. (U//FOU©) Information Assurance Security Officer (IASO). The Army requires a 
commander responsible for IS to appoint an IASO for each IS or group of IS. The same 
IASO may be appointed for multiple IS. The IASO must achieve and maintain the 
certification standards in DoD 8570.01 -M. (DoD 8570.01 -M, 19 Dec 05 (Encl Q7)). The 



61 

UNCLASSIFIED// FOR OFF I C I AL USE ONLY 



UNCLASSIFIED//FOR OFFICIAL USE ONLY 



ATZL-CG 

SUBJECT: AR 1 5-6 Report - Compromise of Classified Information to Wikileaks 



Army IASO duty position is equivalent to the DoD information assurance officer (IAO) 
duty position. (AR 25-2, chapter 3, paragraph 3-2.f., 24 Oct 07 (End Q3)). 

(1) (U/ /FOUO) Nothing in CENTCOM Regulation 25-206 mandates appointment 
of an IAO, although the regulation refers to lAOs in places. USF-I Directive 25-1 
mandates appointment of lASOs as required. (CCR 25-206, paragraphs 7-10 and 7-13, 
undated (End Q2)); USF-I Directive 25-1, paragraph 6.4.5, undated (End Q5)). 

(2) (U// FOUO) USD-C. Mr. |HHJH was designated as the U SD-C IASO, 
and performed duties at the directio^Hh^AM. (DA Form 2823, HEH> 24 Jan 1 1 

(End E91-1 )). The IASO implements the command's IA program to secure network 
infrastructure in compliance with IAM guidance, including identification of vulnerabilities, 
reporting security violations and incidents, network monitoring, and analysis of audit 
data. (AR 25-2, chapter 3, paragraph 3-2.f., 24 Oct 07 (End Q3)). 



(3) (U/ /FOUO) 2/10 MTN. 2/10 MTN had two lASOs. CW2(gJg|g^| | a MOS 

250N Network Management Technician, was appointed an IASO becaus^i^ield the 
required CompTIA Security* credential. (DoD 8570.01 -M, Table AP3, 1 9 Dec 0 5 (End 
Q7)). However, he did not perform d uties as an IASO. (Interview MFR, H I 23 Jan 
1 1 (End E25-1 )). CW2 H^|HD| was on orders as an IAS0 and perfomiedlASO 
duties, but had no form aHraunmg^tner than completion of the on-line SkillPort training. 
(Interview MFR, OB, 23 Jan 11 (End E48-1)). 



h. (U/ /FOUO) System Administrator (SA). 

(1) (U/ /FOUO) Each SA is appointed on orders by the commander and must be 
trained, experienced, IA certified, and currently certified on the IS they are required to 
maintain. The SA should be a U.S. citizen and must hold a U.S. Government security 
clearance and access approval commensurate with his or her level of responsibility. 
Training requirements for SAs are found in AR 25-2, paragraph 3-3a. (AR 25-2, 24 Od 
07 (End Q3); DoD 8570.01 -M, Table AP3, Dec 05 (End Q7)). 

(2) (U/ /FOUO) There were two SAs appointed at 2/10 MTN, both of whom 
performed administrative tasks including, but not limited to IA scanning and vulnerability 
asse ssments and maintaining or suspending user a ccoun ts at the direction of the IAM. 
SGTpmmHH, IA NC0IC ' served as a SA. SGlBB H ran vuln erability scans and 

282313 



reported the results weekly to USD-C. (DA Form 28237y|wwH 21 Jan 1 1 (E nd E1 3- 



6)). SGT| | was another SA with the same respon sibilities as SGT[|j|||gj|. 

lanTF 



(DA Form mlg^ 1 8 Jan 1 1 (End E9-1 ); DA Form 2823, || | 6 Jan 
(End E1 3-5)). 

i. (U/ /FOUO) Information owner/data owner. Each USF-I Major Subordinate 
Command (which included USD-C) has information owner requirements, similar to the 
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data owner responsibilities described in AR 25-2. Those requirements include 
establishing information classification, sensitivity, and access requirements for DoD 
component-specific information. Information owners are also required to ensure that 
access to all DoD IS and specific types of information (e.g., intelligence, proprietary) 
under their purview is granted only on a requirements basis in accordance with DoDD 
8500.1 . Finally, information owners are required to ensure that DoD component-owned 
or component-controlled IS are assessed for IA vulnerabilities on a regular basis, and 
that appropriate IA solutions to eliminate or otherwise mitigate identified vulnerabilities 
are implemented. The USF-I Major Subordinate Commands were required to report IA 
issues to USF-I. (MNF-I Directive 25-1, paragraphs 6.3.5., 6.4.10., 6.7.3., and 6.7.4., 
undated (End Q5); USF-I Directive 25-1, paragraphs 6.3.5., 6.4.10., 6.7.3., and 6.7.4., 
undated (End Q4)). 

j. (U/ /FOUO) All users, regardless of echelon, were required to sign an Acceptable 
Use Policy and complete the same DoD Information Assurance Training required at 
their home stations. (USD-C IA Policy Letter 6-1 , paragraph 6a, 13 Jan 10 (End Q8)). 
All SAs, network/system managers, and IA personnel were required to undertake 
training commensurate with DoD 8570.01-M, CCR 25-206, USD-C IA Policy Letter 6-1, 
and AR 25-2. (DoD 8570.01-M, 19 Dec 05 (End Q7); CCR 25-206, undated (End Q2), 
MNF-I Directive 25-1, paragraph 6.7., undated (End Q5); USF-I Directive 25-1, 
paragraph 6.7., undated (End Q4), USD-C IA Policy Letter 6-1, paragraph 6a (End Q8); 
and AR 25-2, paragraph 2-8, 24 Oct 07 (End Q3)). 

3. (U) Information Assurance Training. 

a. (U) Institutional training. Each IA workforce position requires specific training 
courses — some by distance learning and some in resident training courses. 

(1) (U/ /FOUO) Designated Accrediting Authority (DAA). The Defense 
Information Systems Agency (DISA) hosts a two-hour DAA training package available 
via distributed learning. National Defense University also hosts a DAA training course 
embedded in the CIO certification course taught at Fort McNair. Either of these courses 
fulfills the minimum training requirement for appointment as a DAA. (DoD 8570.01-M, 
chapter 5, paragraph. C.5.3., 19 Dec 05 (End Q7)). 

(2) (U/ /FOUO) Information Assurance Manager (IAM). The only Army course of 
instrudion teaching lAM-type duties is the FA 53 course (Information Systems 
Management), a 30-week course administered by the Signal Center of Excellence at 
Fort Gordon, Georgia. This course provides instruction geared to attaining the Certified 
Information Systems Security Professional (CISSP) certificate, and offers students the 
opportunity to test for the CISSP ce rtificate dur ing the course. The course also teaches 
some provisions of AR 25-2. (Email HttjHUI 19 Jan 11 (End 09)). 
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(3) (U/ /FOUO) Information Assurance Network Manager (IANM). The Warrant 
Officer Basic Course and Warrant Officer Advanced Courses for MOS 250N (Network 
Management Technician) qualify graduates in network management skills and offer 
some training relevant to IA tasks. However, most instruction focuses on securing Wide 
Area Networks rather than on IA tasks related to server management. These courses 
do not adequately ad dress the s pecific requirements outlined in AR 25-2 paragraph 3- 
2e (End Q3). (Email HIH' 1 9 Jan 1 1 < Encl 

(4) (U/ /FOUO) Information Assurance Security Officer (IASO). The Signal 
Center of Excellence offers training for the Security+ and CISSP commercial credentials 
at Fort Gordon (and, through mobile training teams at several remote training sites 
affiliated with Fort Gordon as well). These courses are both stand-alone courses as 
well as embedded in most Signal Officer and Warrant Officer training, but are also 
offered as stand-alone courses. All of the MOS 25B (Information Systems 
Operator/Analyst) Non-Commissioned Officer Education System (NCOES) courses 
include Security+ training, as does the MOS 25B AIT. The MOS 25B courses, even in 
conjunction with a Security+ or a CISSP certificate, do not teach sufficient skills to 
perform IASO responsibilities in accordance with AR 25-2. The only training pipeline 
that adequately addresses both the regulatory and knowledge requirements for an IASO 
is the MOS 255S transition course. However, Warrant Officers do not access directly 
into MOS 255S. There is no other training that meets all IASO requirements. 
(NETCOM IA Training BBP, Tables 1 and 4, 6 Aug 10 (End Q10)). 

(5) (U/ /FOUO) System Administrator (SA). The MOS 25B NCOES and AIT 
courses at Fort Gordon include SA training focus on the Microsoft Server and Client 
operating systems. Limited security training is included in these courses. Fort Gordon 
also hosts several stand-alone functional courses focused on the Microsoft model. 
MOS 25B training for SA duties is adequate for entry-level soldiers completing AIT. 
(NETCOM IA Training BBP, Tables 1 and 4, 6 Aug 10 (End Q10)). 

b. (U) Individual (Unit) Training. 

(1 ) (U/ /FOUO) There is no Army-mandated IA individual training for units 
deploying to combat theaters. (FORSCOM G-6 Training Guidance, 17 Aug 09 (End 
Q29)). There is no unit-level individual certification or sustainment training for DAAs, 
IAM, or lANMs. Those individuals holding commercial certifications required by DoD or 
Army Regulations are responsible for renewing them as required. (DoD 8570.01 -M, 
paragraph C2.3.7. (End Q10); NETCOM IA Training BBP, paragraph 16b, 6 Aug 10 
(End Q10)). 

(2) (U/ /FOUO) For IASO and SA positions, the Army CIO/G-6 leases instruction 
for the Service as a whole through a computer-based instructional website. This site, 
called SkillPort, offers initial and sustainment training for individuals in IASO and SA 
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positions, particularly with respect to specific manufacturers' (e.g., Microsoft, Cisco) 
hardware and software. SkillPort instruction meets the regulatory requirements for 
individual sustainment training for IASO and SA positions. (NETCOM IA Training BBP, 
paragraph 16b, 6 Aug 10 (End Q10)). 

(3) (U/ /FOUO) Collective Training. There is no Army-mandated IA collective 
training for units deploying to combat theaters. (FORSCOM G-6 Training Guidance, 
paragraphs 2.A through 2.L.13, 17 Aug 09 (End Q29)). 

4. (U) Information Assurance (IA) Implementation. 

a. (U/ /FOUO) CENTCOM has overall responsibility for its theater information grid, 
which includes the certification, accreditation and approval of any changes to the Tier 1 
(theater) network of the Global Information Grid (GIG). All network traffic coming out of 
the CENTCOM AOR goes through CENTCOM to the Tier 0 (global) network controlled 
by U.S. Strategic Command. CENTCOM mandates that units operating in the 
USCENTCOM AOR follow their Service's (Army, Navy, Air Force, Marine Corps) IA 
policies governing network operations and maintenance of command, control, 
communications, and computers (C4) assets. As a result, Army units deploying into 
theater were required to implement IA policies and procedures as set forth in AR 25-2. 
(CCR 25-206, paragraph 7-2, undated (End Q2)). 

b. (U/ /FOUO) USF-I operates and maintains the Tier 1 (theater) network within the 
IJOA. USF-I also has responsibility for the portion of the Tier 2 (Iraq) network, or 
internal communications infrastructure for the IJOA, which provides access to the Tier 1 
(theater) network and the Defense Information Systems Network (DISN). The USDs 
and other forces in the IJOA seeking access to the rest of the AOR or outside the AOR 
(to include the DISN) go through the Tier 2 (Iraq) network for access to the Tier 1 
(theater) network. (CCR 25-206, paragraph 2-1 d, undated (End Q2)). 

c. (U/ /FOUO) The division-level networks were independent networking 
environmen ts under the certification and accreditation authority of the USF-I DAA. (DA 
Form 2823, BHI 24 Jan 1 1 ( Encl E91 " 1 ))■ 

(1 ) (U/ /FOUO) When 1 CD deployed into theater in December 2008, MND-B 
(under its predecessor, 4th Infantry Division) renewed its Authorization to Operate 
(ATO) under the Department of Defense Information Technology Security Certification 
and Accreditation Process (DITSCAP). The ATO was approved prior to transfer of 
authority to 1CD and the MND-B domain was integrated into the USF-I enclave, a^art 
of a larger consolidation of networks within the CENTCOM AOR. (Interview MFR, HHj 
24 Jan 11 (Encl E21-1)). 
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(2) (U/ /FOUO) The 1st Armored Division (1AD) assumed responsibility for the 
MND-B domain on its TOA with 1CD in January 2010. Brigadier General (BG) Jeffrey 
G. Smith who commanded 5th Signal Command and served as the DAA for all Army 
units in Europe, approved the DIACAP package for the 1 AD tactical network prior to 
deployment. 0 Rear Admiral (Lower Half) Simpson, the USF-I DAA, reviewed the 
signed DIACAP approval and supplemented it with hi s own DA A memorandum 
approving the 1 AD DIA CAP for use at USD-C. (Emai |KM' 20 Jan 1 1, attached to 
Interview MFR, KB 23 Jan 1 1 (E86-1 )). USF-I had responsibility for tactical 
extensions from tn^JSF-l Tier 2 (Iraq) enclave. (CCR 25-206, paragraph 2-1d., 
undated (End Q2)). 

(3) (U/ /FOUO) The Host-Based Security System (HBSS), a program that 
monitors, detects, and counters against known cyber-threats, was fielded to the 

1 AD/USD-C division headquarters and most of its subordinate brigades in July-August 
2010, after PFC Manning's apprehension. 2/10 MTN did not re ceive HBSS as it was 
pendin g redep loyment out of theater. (Interview MFR JBIHjB' 23 Jan 1 1 ( Encl E36 ~ 1 ): 
( Email HHB' 20 Jan 1 1 , attached to Interview MFR, J| |^23 Jan 11 (E86-1)). 

d. (U/ /FOUO) 2/10 MTN deployed to the IJOA in October 2009 and was placed 
under the operational control of MND-B. They operated their tactical network in theater 
as an extension to the USF-I Tier 2 network infrastructure. The MND-B information 
assurance staff exerci sed oversight of the brigade networks subordinate to MND-B. 
(Interview MFR, 24 Jan 1 1 (End E21-1)). 

(1) (U/ /FOUO) Prior to deployment, 2/10 MTN operated its tactical network 
during two mission rehearsal exercises at the Joint Readiness Training Center (JRTC) 
at Fort Polk, Louisiana and for several weeks at Fort Drum. During 2/10 MTN's 2009 
JRTC rotations, they wer^io^rovide^raining scenarios specifically relating to IA. 
According to the COL |fl|HHB| I the FORSCOM G-6, JRTC focuses on 
"individual tasks" and Tnjotrrui ective IA training tasks." (Email, FORSCOM G-6, 
27 Jan 11 (End 015)). COLHH| added that the training was "kinda embedded in 
some of the IOM (install, operate^na maintain) tasks." (Email, FORSCOM G-6, 27 Jan 
11 (End 015)). 

(2) (U//FOUO) 2/10 MTN deployed to the IJOA in October 2009. The brigade 
fell under the direct command and control of MND-B with MNF-I and CENTCOM acting 



(U) In 2007, DIACAP replaced the DITSCAP process as the established method for the certification 
and accreditation of IS and network in DoD. 
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as the next two higher headquarters. 11 2/10 MTN inhe rited the network structure from 
3/82 ABN, the outgoing unit. (Interview MFR, HH 23 Jan 1 1 ( Encl E34 " 1 ))■ 

(3) (U/ /FOUO) 2/10 MTN operated without the certification and accreditation of 
its network in theater, in violation of CCR 25-206, MNF-I Directive 25-1 and USF-I 
Directive 25-1 . The bri gade tac tical network was under the authority of the DAA for the 
IJOA. (DA Form 2823, BH| 24 Jan 11 (End E91-1)). 2/10 MTN did not prepare the 
DIACAP package requirecHor certification and accreditation of its network, and did not 
have an authori zation to op erate (ATO) or interim author ization to ope rate (IATO). 
(Interview MFR, HHH| 23 Jan 11 (End E13-7)). CPTflEpH the Brigade IAM, 
was unaware of tn^olicies governing submis sion of a D IAuA^ackage and had no 
experience in preparing one. (DA Form 2823, HHHi 6 Jan 1 1 (End E13-5)). 

(4) (U/ /FOUQ) Brigades in the IJOA commonly connected to the Tier 2 (Iraq) 
grid and operated their tactical extensions on the network wit hout form al certification 
and accreditation by t he MNF-I/USF-I D AA. (DA Form 2823, ■■24 Jan 1 1 (E91- 
1)). According to LTCB^HHHL the current USD-I IA/uN^nief, brigades were 
allowed to connect to tn^ncTOtnouniaving submitted the required DIACAP package 
due to operational mission necessity. The brigades did not submit proof of assurance, 
and did not respond to requests to s upply s uch documentation once they were 
established on the network. (Email, gggg, 9 Feb 1 1 (End 045)). 

(5) (U/ /FQUO) 2/10 MTN never received a formal IA certification and 
accreditation inspection during its tour, contrary to the guidance in MNF-I Directive 25-1, 
paragraph 6.4.8. and USF-I Directive 25-1, paragraph 6.4.8. (MNF-I Directive 25-1, 
undated (End Q4); USF-I Directive 25-1 , undated (End Q5)). 1CD, as MND-B, was 
preparing for relief in place with 1 AD when 2/10 MTN deployed to the IJOA. 
Accordingly, 1CD did not conduct IA inspections of 2/10 MTN. MND-B did conduct a 
staff assistance visit to ensure that the brigade had the right tools and proces ses in 
place, but the visit was short of a formal DIACAP inspection. (Interview MFR, |jffi9Q 
31 Jan 11 (End E34-2)). 1AD, as USD-C, planned an inspection of 2/10 MTN Turing 
Easter weekend, 2010, but when the flight slated to transport the inspection team was 
cancelled, the inspection too fell by the wayside and was never rescheduled. USD-C 
became focused on an upcoming Department of the Army Inspector General (DAIG) IA 
inspection and did not con duct an in spection of 2/10 MTN prior to the brigad e depart ing 
the IJOA. (Interview MFRflHB, 23 Jan 11 (End E36-1); Interview MFR,j|§|g«, 23 
Jan 11 (End E86-1)). NeitherMNp-l Directive 25-1 nor USF-I Directive 25-1 mandated 



11 (U) 1st Cavalry Division (1CD) was the unit serving as Multi-National Division-Baghdad (MND-B) from 
January 2009 to January 2010. United States Division-Center (USD-C) was established from the former 
MND-B and Multi-National Forces-West (MNF-W). In January 2010, 1st Armored Division (1AD) relieved 
1CD in place as USD-C and inherited MND-B policies and procedures. References to MND-B are to 
1CD, while references to USD-C are to 1AD. USF-I succeeded MNF-I at the end of Operation IRAQI 
FREEDOM. 
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a specific frequency of inspections, but both required an IA inspection of subordinate 
units. 

(6) (U/ /FOUO) LTC^H noted that MAJ^BB and CPTHBH were 
more attentive to IA concerns, especiall y at the o utseH)Hheir tour, tharnh^tner 
brigades he had seen in the IJOA. LTCJ (assessed 2/10 MTN's IA efforts as 
"better than average." (Interview MFR,| f 31 Jan 11 (End E34-2)). 

(7) (U/ /FOUO) When CPTj | discovered personal movies anc^nusic on 
2/1 (^TN SIPRNet computers, he raisecnne issue to the attention of MAJ | | and 
LTCJI | (2/10 MTN XO). Sometimes these una uthorized mo vies and music carried 
"a buncrM)f viruses along with them." Despite CPT| | efforts to enforce 
network policy, the placement of personal ga mes ancTTiove^n the network appears to 
have persisted. (DA Form 2823flB| | 6 J an 1 1 (End E13-5); DA Form 2 823, 2 1 
Jan 11 (End E13-6); Interview MFKj| 23 Jan 11 (End E13-7)). LTCHI 
was fully awar e of th e efforts to remov^Inautnorized med ia from the SIPRNet ancuie 
informed COLl| | of his plan to do so. (DA Form 2823, H 20 Jan 11 (End E56- 
1); Interview Mp^Hi 10 Jan 11 ( Encl E45 " 1 ))- 

e. (U//FOUO) Knowledge Management. 

(1) (U/ /FOUO) MND-B had a knowledge management plan at the division level. 
Under MND-B, the policy was to keep information channels as open as possible to 
maximize sharing of information. (Interview MFR^| |, 23 Jan 11 (End E34-1)). 

(2) (U//FQUO) Under USD-C policy, administrators were required to configure 
critical network servers for systems security, and analyze and review the logs for 
abnormal activity. Finally, data owners were required to configure directory and file 
level access controls to prevent unauthorized access to data. (USD-C Policy Letter, 
paragraph 7.e., 13 Jan 10 (End Q8); AR 25-2, paragraph 4-5, 24 Oct 07 (End Q3)). 

(3) (U//FOUO) A search by the AR 15-6 investigative team for a 2/10 MTN 
knowledge management plan met with negative results. In the absence of guidelines 
for the enforcement of access controls based on the level of access required to perform 
official duties, no user permissions existed t o restrict acc ess to files or folders within the 
2/10 MTN shared diredory. (DA Form 2 8231 H| 6 Jan 1 1 (End E13-5)). 
Access was restr icted, acco rding to CPTl ^sometime between 27 April and 20 
May 2010. (AIR,| | 2 Jun 10 (EndEW)), 

(4) (U// FOUO) CPTH|HB attempted to move 2/10 MTN data to a Microsoft 
SharePoint server, which employe^efault access controls to limit access to classified 
information toonlWhose personnel who needed the information to perform their official 
duties. CPTjlj Hlwas unable to generate widespread acceptance of SharePoint 
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and the members of the brigade continued to use a shared directory fT-Drive") which 
was limited to members of the briga de network , but did not enforce access controls 
beyond that point. (DA Form 2823, ■■■ 6 Jan 1 1 (End E1 3-5)). It was only after 
PFC Manning was apprehended thaxTnOMTN instituted access co ntrols on folders to 
limit access to the data they contained. (DA Form 2823, HiHI 14 Jul 10 ( Encl 
E13-3)). 

(5) (U/ /FOUO) Until May 2010, user rights for writing to removable media from 
SIPRNet were enabled by default. PFC Manning, by virtue of his duties as an all- 
source intelligence analyst, had work requirements to share his intelligence products 
with interpreters for ultimate use by Iraqi security forces. Accordingly, he had write 
access to removable media. After PFC Manning was apprehended, 2/10 MTN instituted 
limitations on access to data and limited removable media write privileges to select 
computers and select individuals — usually the OIC or NCOIC of a secrtion-^r^ptional 
workplace security procedure described in DoDI 8500.2. (DA Form 2823, BHHII 14 
Jul 10 (E1 3-3)). 

5. (U//FOUO) Army-Wide Response to the Compromise of Classified Information on 
Wikileaks. 

a. (U//FOUO) The Army published four ALARACT (All Army Activities) messages 
directing actions related to Wikileaks. 

(1) (U//FOUO) ALARACT 245/2010 (Encl Q12), "Sensitive Information in the 
Public Domain," was released on 14 August 2010. It reemphasized existing policies 
regarding appropriate response to the compromise of classified and sensitive but 
unclassified national security information, but did not publish any new guidance. 

(2) (U//FQUG) ALARACT 246/2010 (Encl Q13), "Application of Information 
Security Procedures," was released on 17 August 2010. It reemphasized the need for 
compliance with IA policy guidance contained in AR 25-2 but did not publish any new 
guidance. 

(3) (U//FOUO) ALARACT 256/2010 (Encl Q14), "Directed Actions to Safeguard 
Against Unauthorized Information Dissemination," was released on 21 August 2010. 
This was the first message to direct immediate and follow-on actions necessary to 
protect against the unauthorized downloading of sensitive information. This message 
directed all Army activities to immediately review and revalidate who had System 
Administrator rights and user privileges and to grant those individuals the minimum 
privileges required for their assigned duties and nothing more. It also directed a review 
of policies governing the ability to write to removable media and to maximize the limits 
on this capability to the extent operationally feasible. The message also gave guidance 
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for deployment of HBSS on all Army networks, both Non-Secure Internet Protocol 
Router Network (NIPRNet) and Secure Internet Protocol Router Network (SIPRNet)). 

(4) (U//FOUO) ALARACT 260/2010 (End Q15), "HQDA EXORD 307-10 ISO 
Wikileaks Actions to Be Taken by the ACOM, ASCC, DRU, and Army Staff," was 
released on 26 August 2010 and directed all Army Commands, Army Service 
Component Commands, Direct Reporting Units, and the Army Staff to take specified 
actions in response to the publication of classified national security information on 
Wikileaks. The message: 

(a) (U/ /FOUO) Announced that AR 381-12 has been revised under a new title as 
"Threat Awareness and Reporting Program (TARP)," with expected re-publication to 
occur within 30 days. (AR 381-12, Summary of Change, 4 Oct 10 (End Q16)). 

(b) (U/ /FOUO) Advised that the Secretary of the Army had directed Army 
Commands, Army Service Component Commands, Direct Reporting Units, and the 
Army Staff to comply with the three prior ALARACTS issued in response to the 
Wikileaks disclosures and ALARACT 322/3009 (End Q17), which provided ten key 
indicators of a potential insider threat to the Army. 

(c) (U/ /FOUO) Required reestablishment of random entry/exit inspection 
programs for secure areas, to include SCIFs. 

(d) (U/ /FOUO) Mandated review of command Standard Operating Procedures 
(SOPs) to ensure full compliance with Army security policies. 

(e) (U/ /FOUO) Reinforced the requirements for self, supervisor and command 
reporting of security incidents via the Joint Personnel Adjudication System (JPAS). 

(f) (U/ /FOUO) Required that all personnel be made aware of the insider threats 
to DoD and the reporting requirements contained in AR 381-12. 

(g) (U/ /FOUO) Required the addressees to report the status of actions on the 
above requirements to the Army G-2 within 60 days of the order. 

(h) (U/ /FOUO) Directed the Department of the Army Inspector General to 
"consider adding information assurance and security compliance as a separate 
inspection item for FY 201 1 ." 
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SECTION III: Leading the New Generation and Understanding Its Culture 

1 . (U// FOUO) Cultural Gap. Over the course of this investigation, it became apparent 
that there is currently a cultural gap between the first-line and mid-level leaders and the 
Soldiers they lead. I define first-line leaders as squad leaders and mid-level leaders 
through company commanders. The Soldiers they lead are, in major part, of the so- 
called Millennial Generation. This section addresses the general attributes of the 
Millennial Generation, the cultural differences between first-line and mid-level leaders 
and the led and the leadership challenges that arise because of those differences. This 
section will offer some preliminary thoughts regarding how Army leaders might begin to 
bridge this cultural gap. In formulating my thoughts on this subject, as set forth below, I 
drew from several informative and thought-provoking discussions with Dr. Marc 
Sageman. Dr. Sageman is an independent researcher on terrorism and holds various 
academic positions at the University of Pennsylvania, the University of Maryland and 
with national think tanks. After graduating from Harvard, he obtained an M.D. and a 
Ph.D. in sociology from New York University and, since 1994, he has been in the private 
practice of forensic and clinical psychiatry. 

2. (U/ /FOUO) Attributes of the Millennial Generation. PFC Manning is part of the new 
cohort of Soldiers who enter military service with attributes and beliefs that differ 
markedly from those espoused by their predecessors. PFC Manning is a member of 
the Millennial Generation, or a Millennial for short; demographers use this catch-phrase 
to describe the segment of the population bom between 1980 and 2000. 

a. (U/ /FOUO) Net Generation. Millennials are also called the "Net generation" 
because they have no memory of a time when the Internet did not exist. Having grown 
up with the Internet and its related devices and capabilities, Millennials are often said to 
be the most technologically savvy generation in history. The "New Culture" espoused 
by Millennials is transparent, savvy with social media and isolated from the physical 
world — leading to the development of strong loyalties in the virtual world. 

b. (U/ /FOUO) Different Values in the Virtual World. Millennials develop values and 
loyalties in the virtual world that often clash with more traditional values and loyalties in 
the physical world. Clashes occur because some Millennials derive a different value set 
from their participation in the virtual world. Because the world is virtual, there is no 
perceived benefit to or need for confidentiality or secrecy, nor is one forced to accept 
the tangible consequences of one's actions. In their virtual world — comprised of online 
gaming and blogging — Millennials believe it acceptable to act in any way one wishes— 
their actions generate no perceived consequences for which they may be held to 
account. The appeal and "freedom" of this virtual world is well illustrated in PFC 
Manning's internet chats with Adrian Lamo. (Wired.com article, "I Can't Believe What 
I'm Confessing to You," The Wikileaks Chats, 10 Jun 10 (End 01 0)). 



71 

UNCLASSIFIED/ /FOR OFF I C I AL USE ONLY 



UNCLASSIFIED/ /FOR OFF I CIAL USE ONLY 



ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



c. (U//POUO) "Need to Know" vs. "Need to Share." It is the Millennials' commitment 
to transparency that is also troubling in a military context in which the survival of a 
Soldier and his unit often depend on denying the enemy access to sensitive intelligence 
information. Prior to 9/1 1 , access to classified information was based on a "need to 
know." After 9/1 1 , and particularly after the 9/1 1 Commission issued its findings, a 
"need to share" culture developed. (9/1 1 Commission Report, page 434, undated (End 
016)). In the aftermath of the 9/1 1 attacks, the U.S. Government began a practice of 
sharing intelligence, not just within the IC, but with any and all stakeholders across the 
greater interagency. Naturally, the military was drawn into this pervasive trend toward 
information sharing. The diversity and volume of classified national security information 
spilled in the Wikileaks incident is an unplanned, but predictable outcome of this "need 
to share." The "need to share" classified national security information remains 
paramount in appropriate cases. That said, procedures must be in place to safeguard 
information and deny access to those who are not properly cleared and/or do not have 
an official need to know. Leaders and those with oversight of personnel with access to 
classified information must scrupulously enforce access standards. 

3. (U/ /FOUO) Leadership Challenges. The cultural differences between the first-line 
and mid-level leaders and young Soldiers reflect a cultural gap, of which PFC Manning 
may be the bellwether. (Interview MFR, Sageman, 27 Jan 1 1 (End E72-1 )). 

a. (U/ /FOUO) Small Unit Cohesion vs. Millennial Attributes. Mid-level leaders of 
Millennial Soldiers are comfortable with hierarchy, in marked contrast to the Millennials 
themselves who may not be (USAToday.com, accessed 26 Jan 1 1 (End 01 1)). 
Because the overarching success of the military is grounded in small unit cohesion, a 
young Soldier who is familiar with, and most comfortable in, the virtual world of the 
Internet - where the self is praised and individuality as well as transparency are glorified 
- may be unable to adapt to the military's focus on teamwork and operational and 
information security. 

b. (U/ /FOUO) Erosion of Leadership Skills. Exacerbating this cultural gap is the 
leadership challenge that currently exists. The current crop of first-line and mid-level 
leadership is proficient in combat; however, leadership in a garrison setting and the 
execution of administrative duties prove challenging. The 2010 Army study on Health 
Promotion, Risk Redudion, and Suicide Prevention (HP/RR/SP (End 012)) found, 
"[t]he Army's professional development priorities and operational tempo have eroded 
the technical skills, communicative skills and experiential knowledge needed to 
lead/manage effedively in the garrison environment." (HP/RR/SP, page 38 (End 012)). 

c. (U/ /FOUO) Recommended Adions. One recommendation proffered by the 
HP/RR/SP study team to corred this deficiency was to "ensure PME [professional 
military education], pre-command courses (PCC) and local CDR/1SG courses provide 
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leaders with the skills to mitigate the challenges of leading Soldiers in garrison." 
(HP/RR/SP, page 38 (End 012)). 

d. (U/ /FOUO) Train Leaders on the New Culture. The skills taught and developed 
at the courses mentioned above should include exposure to and practice in the 
leadership theories and techniques effective in managing and guiding members of the 
Millennial Generation, integrating them in our Army and leveraging the unique skills and 
perspectives they possess for the good of the organization. 

4. (U/ /FOUO) Small Unit Cohesion and the Army Values. In my view, connections 
between Soldiers, the fabric of any well-disciplined, high performing unit, are the best 
way to illustrate to Millennials that secrets and security are both necessary and 
appropriate in an Army at war; failure to safeguard sensitive information has the 
undesired consequence of putting them and their buddies in the unit at risk. Although 
the Army Values have the potential to begin to address this cultural gap between first- 
line and mid-level leaders and the led, we must undertake an educated and concerted 
effort to identify and understand the attributes associated with Millennials if we hope 
ever to bridge the gap fully. 

5. (U//FOUO) Loyalty & Commitment. Conversely, the Millennial Generation must 
begin to understand that service as a Soldier entails adherence to standards and 
values. Loyalty to nation, obedience to the orders of the chain of command and 
commitment to the welfare of the small unit are nonnegotiable. Maintaining these 
standards and values requires some information to be carefully safeguarded. Access to 
and dissemination of information requires discretion and confidentiality. In a world 
marked by daily technological advances, voluminous data can be disseminated across 
the globe easily and quickly. (Defense Science Board 2006 Summer Study on 
Information Management for Net-Centric Operations, Vol. II, April 2007, page 3 (End 
039)). The scale and impact of a leak may be exponentially greater than previously 
imagined. Precautions must be taken to effectively assess the trustworthiness of those 
who are granted access to the Army's most sensitive information. For those with 
access, leaders must remain vigilant for behavioral indicators or signs that might call 
into question an individual's trustworthiness and, take appropriate action to address 
such indicators or behavioral signs while safeguarding information. As with every 
challenge confronting our Army, good leadership — more so even than technological skill 
or mastery of the complexities of IA — is the key to success. 

6. (U/ /FOUO) Conclusion. Along with the focus on the lost art of leadership in garrison, 
an emphasis must be placed on team building at all levels — all members of a unit — 
baby boomer, Generation "X" or Millennial — must be made to act and feel part of the 
team. Additionally, the Army must ensure strong leadership, responsibility and 
accountability throughout the chain of command — leaders themselves must know, 
exemplify and enforce the standard. 
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SECTION IV: Findings and Recommendations Relating to Information Assurance, 
Physical Security, Personnel Security and Behavioral Health 

Section IVA: Findings and Recommendations Pertaining to Information 

Assurance. 

1 (U//J=QUO) Findings. 

a. (U//FOUO)2/10MTN Deficiencies. 

(1) (U// FOUO) Information Assurance (IA) personnel did not hold all of the 
credentials required by their positions. 2/10 MTN appointed an Information Assurance 
Security Officer (IASO), an Information Assurance Network Manager (IANM) (which 
could be filled by an IASO) and two Systems Administrators (SA), in accordance with 
paragraph 2.E. of U.S. Army Forces Command (FORSCOM) G-6 training guidance for 
deploying units, dated 17 August 2009, which restates the requirements of AR 25-2 
(FORSCOM G-6 Training Guidance, 17 Aug 09 (End Q29)). Although two personnel 
were ap pointed on orders as lASOs, only one actually performed IASO duties. CW2 
91919 possessed the Security+ commercial cer tification requ ired by DoD 8570.01 -M, 
buUie did not perform IASO duties. While CW2BB|^^I did not meet the 
commercial certification requirements for an lASOJi^wa^rill fully capable of 
performing his assigned duties as an IASO and did so. 

(2) (U//FOUO) The 2/10 MTN tactical network was not properly certified and 
accredited . Although 2/10 MTN adhered to the connection approval process, CPT 
[P^HH had not been trained in the preparation of DoD Information Assurance 
Certification and Accreditation Process (DIACAP) packages and did not prepare one. 
The failure to prepare and submit a DIACAP package violated CCR 25-206, paragraphs 
5-14c(10(a) and 7-16, undated (End Q2), MNF-I Directive 25-1, paragraph 6.4.3, 
undated (End Q4), and USF-I Directive 25-1, paragraph 6.4.3, undated (End Q5). 
Completion of a DIACAP package would have provided a disciplined method of 
determining vulnerabilities, establishing access controls and remediating identified 
deficiencies. 

(3) (U//POUO) USF-I did not enforce the requirement to submit a DIACAP 
package as a prerequisite to connection to the network. While MND-B and USD-C had 
both been authorized to operate their networks as an extension onto the USF-I network, 
the brigades had no such authorization, for which the USF-I DAA was the approving 
authority. 

(4) (U//FOUO) There was no knowledge management plan at 2/10 MTN. The 
lack of such a plan meant there was no guidance for establishing effective access 
controls or enforcement of the core principle that only properly cleared users with an 
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official requirement for information were permitted to access the brigade network. The 
access control policy on the brigade network's shared directory denied access only by 
exception. The brigade did not fully implement a more restrictive access control model 
(via Microsoft SharePoint) until after PFC Manning's apprehension. 2/10 MTN did not 
fully implement a policy to enforce information owner and data owner responsibilities set 
forth in MNF-I Directive 25-1, USF-I Directive 25-1, and AR 25-2. (MNF-I Directive 25-1, 
paragraph 6.2.2, undated (End Q5); USF-I Directive 25-1, paragraph 6.2.2, undated 
(End Q4); AR 25-2, paragraph 3-3b, 24 Oct 07 (End Q3)). DoDD 8500.01 E does not 
address data owner/management responsibilities and those responsibilities are only 
partially addressed in AR 25-2 and USF-I Directive 25-1 . (USF-I Directive 25-1 , 
paragraph 6.2.2, undated (End Q4); AR 25-2, paragraph 3-3b, 24 Oct 07 (End Q3)). 
AR 25-1 does not mandate the creation of a knowledge management plan and only 
tangentially addresses knowledge management at the tactical level. These regulations 
need to be expanded and improved to include more robust guidance in these areas. 

(5) (U/ /FOUO) The presence of movies, music and games on 2/10 MTN 
SIPRNet computers was in dired violation of MNF-I Diredive 25-1, paragraph 6.7.1 1, 
undated (End Q5), USF-I Diredive 25-1, paragraph 6.7.11, undated (End Q4) and AR 
25-2, paragraph 4-20(d)(3), 24 Od 07 (End Q3). That IA personnel were aware of, and 
tolerated these violations further contributed to already lax standards of IA and network 
security. 

(6WU//POUO) The presence of movies, music and games itself, notwithstanding 
^ PT fitBHH efforts t0 remove them and secure the network, while not a dired 
o>ntriDuton^ne unauthorized disclosure of classified information, evidence a general 
failure to enforce the policies set forth in MNF-I Diredive 25-1 , undated (End Q5) and 
USF-I Diredive 25-1 , undated (End Q4). All signs point to an undisciplined operating 
environment on the 2/10 MTN network. 

(7) (U/ /FOUO) CPT BKHjB made a concerted effort to comply with IA 
principles. He alerted the 2/1tTOT^Executive Officer (XO) to the presence of 
unauthorized media on the network and made appropriate requests asking higher 
headquarters to condud vulnerability assessments. On one occasion, the Regional 
Computer Emergency Response Team (RCER T)-Southwes t Asia (from Kuwait) 
executed such an assessment. However, CPT gjj^^J I lack of training prevented 
him from fully complying with regulations. 

(8) (U/ /FOUO) Despite being infor med by CPTflBBBI that unauthorized 

media was on the 2/10 MTN network, LTC^H| the BC^xO^ail ed to ta ke 
appropriate steps to terminate or deter this practice. Although LTC (■■disseminated 

guidance to the staff to remove unauthorized media from systems, h^aned to properly 
follow up, further contributing to an undisciplined attitude towards the 2/10 MTN 
network. 
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b. (U/ /FOUO) Higher Headquarters Deficiencies. 

(1) (U/ /FOUO ) As succ essive Division G-6s for 2/10 MTN, both LTCHH|, 
and subsequently LTCjjJI^JjJJ, had overall responsibility for the tactical networR~mey 
were responsible for ensuring that all subordinate units, to include 2/10 MTN, certified 
and accredited their networks prior to operating on the theater network. They were also 
responsibl e to ensu re that th eir subo rdinate lAMs conducted full IA inspections of 2/10 
MTN. LTC and LTC|g||jfl failed to exercise proper supervisory responsibility 
to ensure thanh^/IO MTN network was certified and accredited in accordance with 
applicable regulations and to ensure that 2/10 MTN was properly inspected. 

(2 ) (U/ /FOUO) As the Division lAMs for 2/1 0 MTN, both MAJ BH and MAJ 

I were directly responsible for verifying that all subordinate unitMo include 2/10 
Mm^ertified and accredited their networks prior to operating on the theater network. 
They were also responsible for conducting full IA inspections of 2/10 MTN. They failed 
to exercise their responsibility to ensure that the 2/10 MTN network was certified and 
accredited in accordance with applicable regulations and that 2/10 MTN was properly 
inspected. 

(3) (U/ /FOUO) Institutional Deficiencies. Army regulations and doctrine do not 
adequately address knowledge management and IA requirements for tactical units. The 
responsibilities of a tactical unit (corps, division, brigade, battalion) G-6/S-6, as 
enumerated in FM 6-02.71, paragraphs 3-53 and 3-54, 14 Jul 09 (End Q6) are 
authoritative but not prescriptive, leading to confusion over the actual responsibilities 
associated with these positions. The guidance in AR 25-1 and AR 25-2 is prescriptive 
but is oriented primarily at the Institutional Army. 

c. (U/ /FOUO) Training Deficiencies. 

(1) (U//FOUO) Institutional training in 2/10 MTN was inadequate. A recurring 
trend in IA personnel in 2/10 MTN was a lack of formalized training for their positions. 
Figure 8 illustrates in graphic form the many deficiencies in the scope and breadth of 
institutional training provided to IA personnel. 
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(U//FOUO) 

(2) (U//FQUO) The BCT S-6 I A personnel were not properly trained. The 2/10 
MTN S-6 brigade staff inconsistently a pplied the IA procedures set forth in AR 25-2. 
Both MAJ^H (BCT S-6) andCPTl H| ( BCT iAM ) were ill-prepared to handle 
their IA responsibilities. CPT| ^aeployed t o theater im mediately following 
graduation from the FA 53 cours^by tie time CPT^B- & J arrived at 2/10 MTN, the 
BCT had already conducted its relief in place/transferofsritnority (RIP/TOA) with the 
3/82 ABN. The lack of comprehensive IA training was one reason that IA best practices 
were not well instituted in 2/10 MTN. 

(3) (U//FOUO) 2/10 MTN had no personnel familiar with the IA regulatory 
requirements outlined in AR 25-2, paragraph 3-2d(13) which mandates certification and 
accreditation of the tactical network in accordance with the DIACAP. Brigade IA 
personnel were unaware of the requirement to generate a DIACAP package or unsure 
how to do so. As a result, the brigade network did not meet the certification and 
accreditation requirements of the DIACAP program and the brigade network did not 
implement the IA controls required to properly secure the network. 
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(4) (U//FOUO) Prior to deployment, 2/10 MTN I A personnel had little opportunity 
to train on critical IA tasks. The complete lack of lA-focused training at the Combat 
Training Centers (CTCs) contributed to a lack of readiness on the part of BCT IA 
personnel to perform the IA missions required of them in the I JOA. 

(5) (U// FOUO) FA 53 training is inadequate. Interviews and sworn statements 
rendered by Signal branch and FA 53 field grade officers in the c ourse of this 
investigation, especially those of CPT HSU9 and MAJ Hft|B indicate that the 
current FA 53 qualification course doe^iotprovide the requisite instruction on 
certification and accreditation of IS sufficient to prepare personnel to perform 1AM duties 
in accordance with AR 25-2. No other military education or training course includes 
instruction regarding 1AM duties. As a result, FA 53 officers are graduating from their 
qualification course unprepared for the duties they will face when they serve as an 1AM 
in the field. 

(6) (U/ /FOUO) LTC HH observation that 2/1 0 MTN was "better than 
average" with respect to IA, as compared to his other brigades, indicates a general lack 
of institutional knowledge on IA across the Army. The absence of collective training, 
limited individual training, and orientation of policies towards the institutional Army 
contribute to this lack of knowledge. 

(7) (U/ /FOUO) DoDD 8500.01 E does not address data owner/management 
responsibilities and they are only partially addressed in AR 25-2 and USF-I Directive 25- 
1.2/10 MTN data owners were not trained on their responsibility to secure their data, 
whether it was stored locally on an information system or centrally on a shared drive. 
No knowledge management plan existed to provide guidance to data owners for 
determining which personnel had a requirement for access to specific classified national 
security information and AR 25-1 does not prescribe guidance for the development of 
such a plan. As a result, there were few internal controls preventing PFC Manning from 
gaining access to data for which he had no official requirement. 

(8) (U//FOUO) DoD 8570.01 -M, 19 Dec 05 incorporating change 2, 20 Apr 10 
(End Q19) is too focused on mandating commercial certifications to meet various IA 
workforce requirements. These certifications have some utility but do not guarantee a 
more-qualified IA professional. 

d. (U//PQUO) Materiel. 

(1 ) (U/ /FOUQ) There were no IA security tools at 2/1 0 MTN that specifically 
addressed insider threats. The 1AD headquarters deployed the Host-Based Security 
System (HBSS), a program that monitors, detects, and counters known cyber-threats, 
but not until after PFC Manning had been apprehended. 1AD did not deploy it to 2/10 
MTN because the brigade was slated to return to home station in the near term. HBSS 
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may have detected and prevented efforts to search the network for other than official 
purpose, as well as the subsequent download of information from the SIPRNet. (USF-I 
380-5, Findings and Recommendations, paragraph 3.b (End R1 )). 

(2) (U/ /FOUO) However, even had HBSS been fielded prior to PFC Manning's 
extraction of data, it would not have prevented Soldiers from running the data extraction 
tools built into the SIPRNet sites to search for and pull Afghanistan and Iraq significant 
activity reports (SIGACTs). Nor would HBSS have stopped Soldiers from using any 
approved web browser program to manually download content from the varied SIPRNet 
websites accessible at the time of 2/10 MTN's deployment to Iraq. Even if the HBSS 
feature that restricts a user's ability to write data to re-writeable media had been 
activated, an intelligence analyst's duties include providing intelligence for translation. 
Therefore, as an intelligence analyst, PFC Manning likely would have been granted the 
rights required to write to removable media. 

(3) (U/ /FOUO) Arcsight, a security event correlation program, is deployed to all 
theater network operations and security centers (NOSCs) and RCERTs. Arcsight relies 
on IA sensors that are not em placed onto tactical networks because of the additional 
bandwidth they require to transmit data back to the TNOSC. However, none of PFC 
Manning's activities would have registered in theater-level Arcsight auditing because 
everything that he did would have been presumed to fall within the scope of his 
intelligence analyst duties. Arcsight is not currently configured to detect insider threat 
behaviors. Reconfiguring Arcsight to do so would require the emplacement of IA 
sensors subject to intelligence oversight. 

(4) (U/ /FOUO) Data loss prevention tools offer capabilities for monitoring activity 
on DoD IS and early detection of insider threat behavior. Although the computer 
industry has not settled on a single definition of data loss prevention, a working 
definition from Securosis, an information security research and advisory firm, is that of 
"products that, based on central policies, identify, monitor, and protect data at rest, in 
motion, and in use, through deep content analysis." (Securosis paper, 21 October 2010 
(End 035)). These data loss prevention tools can identify and block certain patterns of 
user behavior that may be consistent with an insider threat. 

e. (U//FOUO) Information Assurance and the SCIF. 

(1 ) (U/ /FOUO) IA rules are not changed for SCIFs. The measures for IA in 
SCIFs for non-IC networks are the same as for non-SCI facilities. Any changes in IA 
regulations, procedures or policies to collateral networks like SIPRNet will apply to both 
SCIFs and collateral work areas, thereby obviating any special requirements for SCIFs. 

(2) (U//POUO) A two-person control system was not used. 2/10 MTN did not 
enforce a two-person control system until after PFC Manning was apprehended. The 
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enforcement of a two-person control system serves as a visible deterrent to insider 
threat activity, would have increased command oversight of PFC Manning's activities 
and would have enabled enforcement of proper information handling and storage 
procedures, as described in DoDI 8500.2, Enclosure 4, Attachment 4, 6 Feb 03 (End 
Q20). Two-person control is an optional measure described in Enclosure 4, attachment 
4 of DoDI 8500.2 (End Q20). 

2. (U//FOUO) Recommendations. 

a. (U/ /FOUO) Regulatory Issues. 

(1 ) (U/ /FOUO) Recommend that the Secretary of the Army propose to the 
Secretary of Defense that he dired the Assistant Secretary of Defense (Network and 
Information Integration) (ASD(NII))/DoD Chief Information Officer (CIO) to convene a 
working group comprised of representatives of all DoD Components to undertake the 
revision and update of DoDD 8500.01 E (End Q1 ) specifically to address data owner 
and data manager responsibilities. The Secretary should further ensure that AR 25-2 
(End Q3) is updated to conform with the revised DoDD. 

(2) (U//FOUO) Recommend that the Secretary of the Army propose to the 
Secretary of Defense that he direct the ASD(NII)/DoD CIO to convene a working group 
comprised of representatives of all DoD Components to update DoD 8570.01 -M (End 
Q19) to eliminate the manual's singular focus on commercial certification of IA 
personnel and to develop a military certification requirement for IA that merges the best 
of the commercial certifications with the practicality and fundionality of military 
requirements in theater. 

(3) (U//FQUO) Recommend that the Secretary of the Army dired the Army 
CIO/G-6 to update AR 25-1 (End Q33) specifically to address the development and 
implementation of knowledge management strategies in tadical units and to enumerate, 
in detail, the duties and responsibilities of a tadical unit (corps, division, brigade, 
battalion) G-6/S-6. 

(4) (U/ /FOUO) Recommend that the Secretary of the Army direct the Army 
CIO/G-6 to review and update all IA regulations and policies to ensure uniformity in the 
definition and application of IA terms and in the functions and duties assigned to IA 
positions. Further recommend that the Secretary of the Army direct the Army CIO/G-6 
and the Deputy Chief of Staff, G-2 to collaborate with a view to harmonizing Army 25- 
series and 380-series regulations, with specific focus on tactical unit IA requirements 
and IA personnel duties and responsibilities. Lastly, recommend that OSD and JCS 
update their IA policies to resolve inconsistencies among service, joint force 
commander and DoD guidance. 
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(5) (U//FQUQ) Recommend that the Secretary of the Army propose to the 
Secretary of Defense that he direct a review of CENTCOM/USF-I IA policies, 
particularly as they apply to network certification and accreditation practices. 

b. (U//POUO) Training. 

(1 ) (U/ /FOUO) Recommend that the Secretary of the Army direct the 
Commander, U.S. Army Training and Doctrine Command to: 

(a) (U/ /FOUO) Ensure that all Signal Officer, Warrant Officer and NCO training 
courses include comprehensive and robust training in all subject matter areas 
addressed by AR 25-2. 

(b) (U/ /FOUO) Develop a two-week functional course for entry level lAMs, 
modeled on S-6 training courses, but specifically designed to train FA 53s and Warrant 
Officers in the field to standard. Incorporate elements of this functional course into 
other 25-series courses, particularly into the Signal Captains Career Course and 
battalion and brigade S-6 staff courses. 

(c) (U/ /FOUO) Develop a one-week functional course for lASOs to complement 
the entry-level 1AM functional course. Incorporate the IASO course in all MOS 25B 
training and Warrant Office Basic Course 255A training. 

(d) (U/ /FOUO) Develop and mandate implementation of an I A collective training 
plan and include in all CTC training exercises lA-related tasks and events designed to 
prepare IA personnel for their duties and responsibilities in theater tactical settings, to 
include the prevention and detection of both insider and conventional external threats. 

(2) (U//FOUQ) Recommend that the Secretary of the Army direct the 
Commanding General, U.S. Army Combined Arms Center, in conjunction with the Army 
CIO/G-6, to oversee the revision and update of the Signal elective offered as part of 
Intermediate-Level Education (ILE) to provide state of the art network operations 
training and further require all Signal officers to complete that elective. 

(3) (U//FOUO) Recommend that the Secretary of the Army ensure that all units 
exercising training and readiness oversight (TRO) require the inclusion of lA-specific 
events in subordinate units' pre-deployment training. 

c. (U//FOUQ) Materiel. Recommend the Secretary of the Army direct the full 
fielding of CND and data loss prevention tools such as HBSS and Arcsight. Further 
recommend that the Secretary of the Army take special care to ensure that the 
employment of these tools is subject to formal, stringent oversight to ensure compliance 
with applicable law and policy. 
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Section IVB: Findings and Recommendations Pertaining to Personnel Security 

1. (U//FOUO) Findings. 

a. (U//F©yO) The Army G-2's review of PFC Manning's security clearance process 
determined that PFC Manning's security clearance background investigation and the 
adjudication of clearance eligibility were conducted in accordance with the national 
investigative and adjudicative standards. However, not all relevant information was 
available during PFC Manning's security clearance process, to include his prior 
behavioral health issues, his behavioral health issues at basic training and his 
disciplinary issues at AIT. This was due in part to investigative limitations and the 
failure of leaders to report derogatory information. 

b. (U/ /FOUO) PFC Manning made three false statements on his SF 86. He lied 
when denied having debt, denied having ever been fired from a job, and denied ever 
having sought professional help for behavioral health issues. The investigator was only 
aware of the first two. 

c. (U/ /FOUO) While the background investigation was conducted in accordance with 
the National Investigative Standards (NIS), those standards are such that the 
investigator was unable to follow-up on the nature of PFC Manning's $1 ,472 debt (i.e., 
he skipped out on his lease) because it did not exceed the acceptable debt standard. 
Further, PFC Manning informed the investigator that his stepmother had made 
allegations that PFC Manning threatened her. The investigator conducted a search of 
police records that yielded no information, but did not follow up with the stepmother. 
Had the stepmother been interviewed, she may have disclosed that PFC Manning had 
sought help for behavioral health issues, a fact that he failed to disclose on his SF 86 or 
during the personal interview component of his background investigation. 

d. (U// FOUO) The security clearance adjudication process did not adequately 
identify and assess "red flags." Further, and more importantly, the adjudicators did not 
have access to all relevant information. While this AR 15-6 investigation has the benefit 
of hindsight, there are several issues that could have been better addressed in the 
clearance adjudication process. 

(1 ) (U// FOUO) The National Adjudicative Guidelines state that the adjudication 
process is the careful weighing of a number of variables known as the "whole person 
concept." (Intelligence Community Policy Guidance 704.2, Annex A, part II, 2 Oct 08 
(End Q49)). Adjudicators are charged with considering all available information about 
the person (past, present, favorable, or unfavorable) and must consider the nature, 
extent, and seriousness of the conduct, as well as the individual's age and/or maturity at 
the time of the conduct. Adjudicators are required to start with the "presumption of 
trustworthiness." They are then charged with reviewing the packet and determining 
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whether there are any indications that the person would not be trustworthy or reliable. 
Any adverse finding must be tied to one of the 13 national criteria which may be 
mitigated in accordance with the guidance. This presumption of trustworthiness causes 
some challenges when the investigation covers only a minimal number of years. In this 
case, PFC Manning's background investigation covered only a period of 28 months. 

(2) (U/ /POUO) While not addressed as such in the security clearance process, 
that PFC Manning "skipped out" on his lease should have be considered an act of 
untrustworthiness. The adjudicative guidelines states "failure or inability to live within 
one's means, satisfy debts, and meet financial obligations may indicate poor self- 
control, lack of judgment, or unwillingness to abide by rules and regulations, all of which 
can raise questions about an individual's reliability, trustworthiness and ability to protect 
classified information." (USD Memorandum, Subject: Implementation of Adjudicative 
Guidelines for Determining Eligibility for Access to Classified Information, Guideline F, 
30 Aug 06, (Q48)). PFC Manning had a debt of approximately $2,500 which he failed to 
report. One debt was owed to Coopermill Apartments and totaled $1 ,472. He also had 
three other accounts in collection, totaling $929. While the monetary amount of a debt 
or debts should be considered in determining whether financial concerns preclude an 
individual from being granted a security clearance, the nature and number of debts 
need to be examined as well. In this case, according to Army G-2 personnel, the debt 
was minor and not considered in evaluating PFC Manning's suitability for access to 
classified information. Debt is considered (no matter the scenario) when other 
indicators are present (e.g., alcohol/substance abuse, gambling etc.). Per the Army G- 
2, the fact that PFC Manning vacated his apartment without notice to his landlord and 
simply left the keys is similar to ignoring debt and is not uncommon. (MFR, Army G-2, 
Enclosure 3 (End 04)). Although I agree that the amount of PFC Manning's debt is 
relatively small, in my opinion, the fact that he "skipped out" on his responsibilities 
should have been given more weight in assessing his reliability and trustworthiness. 
Additionally, there should have been an analysis of the number of debts (four in total) 
and his rationale forfaiting to disclose these debts on his SF 86. At a minimum, a 
follow-up interview should have occurred to clarify the facts and circumstances 
surrounding his financial indebtedness and failure to report it on his SF 86 e-QIP. 
Currently, the national investigative standards require the debt to ex ceed $7,5 00 before 
an investigator can make additional contact with the subject. (Email flfH| 1 Feb 1 1 
(018)). Investigators should have flexibility, after considering all fact^mc^^ 
circumstances known to them at the time, to conduct follow on interviews in situations 
when the debt in question falls below the thresholds set out in the Adjudicative 
Guidelines. 

(3) (U//FQUO) Adjudicators did not know about PFC Manning's prior behavioral 
health issues and were not informed about the concerns associated with PFC 
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Manning's conduct and his behavioral health that came to the forefront during Basic 
Training and AIT. 

e. (U/ /FOUO) PFC Manning's prior behavioral health issues were not identified 
during his MEPS processing. PFC Manning failed to truthfully answer questions 
regarding whether he had been evaluated or treated for a behavioral health condition. 

f. (U/ /FQUO) Continuing Evaluation. Notwithstanding the issues this investigation 
identified with regard to the security clearance investigation and adjudication processes, 
the critical failure in the area of personnel security resides with PFC Manning's leaders 
who did not take appropriate actions when faced with allegations of misconduct, 
behavioral health issues, and statements made to peers and co-workers regarding his 
loyalty to the United States and the meaning of the American Flag. 

(1) (U/ /FOUO) There is no institutional training available for commanders or 
leaders on their responsibility to continuously evaluate a Soldier's eligibility to access 
classified information. Further, there is no training designed to prepare and assist 
leaders to identify when misconduct or other behaviors should trigger a derogatory 
information report to the Army CCF. AR 381-12 (End Q22) was revised in October 
2010 in order to capture and disseminate indicators of Insider threat" from a 
counterintelligence perspective. However, individuals who exhibit lack of judgment or 
control and/or have been deemed to be a threat to themselves or others may also pose 
a security threat. Commanders and leaders must be able to identify behaviors that call 
into question an individual's suitability for access to classified information. 

(2) (U/ /FOUO) One potential way to raise awareness of the linkage between 
misconduct and security is to include a block on the Record of Proceedings Under 
Article 15, UCMJ, DA Form 2627, to remind the imposing commander of the need to 
consider whether the circumstances underlying the Article 15 warrant suspension of, or 
the initiation of action to revoke, the Soldier's security clearance and provide the 
commander a designated space in which to record his decision. Also, requiring that 
copies of Article 15s be furnished to the command G-2 or security manager would 
provide another mechanism to ensure that appropriate assessments are made and 
required reporting is executed. 

(3) (U/ /FOUO) Commanders and behavioral health care providers must be 
educated on the linkage between behavioral health issues and security risks. 
Behavioral health issues that became evident during basic training must be fully 
assessed and addressed. A command-referral to Behavioral Health for "tantrum fits of 
rage" should result in something more than the Soldier being taught breathing 
exercises. When a Soldier has a security clearance, especially at the TS/SCI level, 
commanders and behavioral health care providers must be able to work together to 
identify when behavioral health issues should result in a derogatory report to CCF. 
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(4) (U// EQyQ) P FC Manning's outbursts and anger management issues were 
viewed by MSG fljKfl| as mental health issues. However, it should be noted that his 
outbursts were ais^iolations of the UCMJ. Specifically, it appears that PFC Manning 
was frequently disrespectful and insubordinate to his supervisors and arguably 
committed several assaults. 

(5) (U/ /FOUO) MSG §0§9| failure to properly and promptly report to the chain 
of command the full scope offh^rtanning's conduct, behavioral health issues, 
disavowal of loyalty to the United States, and the "My Problem" email, denied the 
command the awareness they needed to take appropriate actions to suspend PFC 
Manning's access to classified information or to submit a DEROG. However, this lack 
of communication does not excuse the company chain of command's failure to maintain 
situational awareness of the issues that were impacting their Soldiers and the mission 
and their failure to fully investigate and take appropriate action regarding the December 
2009 incident. 

(6) (U/ /FOUO) The Division G-2 put in place a good process to review command 
referred behavioral health information in order to assist commanders in determining 
appropriate actions regarding Soldiers' access to classified information. However, no 

Srocess existed at the BCT level, specifically within 2/10 MTN. (Interview MFR, 
24 Jan 1 1 (End E39-1 )). This is an indicator, in part, of the level of experience 
ts at the Division G-2 as compared to the BCT S-2. It is also an indicator of the 
impact of modularity on the ability of the Division G-2 to provide effective oversight of 
his functional counterpart at the BCT. 

g. (U/ /FOUO) Army G-2 Comprehensive Security Resiliency Program. As briefed to 
the investigative team, the Army G-2 Comprehensive Security Resiliency program 
addresses several of the personnel security concerns raised by this investigation. 
Specifically, by improving and standardizing training, implementing a risk rating tool and 
creating an automated continuing evaluation system, commanders and leaders will be 
better equipped to fulfill their responsibilities as set out in AR 380-67, 9 Sep 88 (End 
Q23). 

2. (U//FQWO) Recommendations. 

a. (U//FOUO) PFC Manning's security clearance background investigation and 
adjudication, together with other pertinent excerpts from this AR 15-6 report should be 
forwarded to the Joint Reform Effort (JRE) to permit the committee to consider and 
incorporate in its efforts appropriate findings and recommendations from this report. 
The JRE is a national effort focused on improving security clearance investigation and 
adjudicative standards. As DoD and DA are required to follow the national investigative 
and adjudicative standards, any recommendation to modify these standards must be 
elevated to the national level. The limits on OPM's ability to investigate a clearance 
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applicant fully (e.g., no jurisdiction to investigate events that occurred prior to an 
applicant's 16th birthday or to investigate in foreign countries) comprise an area of 
concern that should be addressed. The Army's demographic includes many young 
Soldiers - the vast majority of whom present little or no security risk. For those Soldiers 
who may present a threat, tightening the investigative standards, particularly when the 
period of time subject to investigation is severely limited could provide a more sound 
basis on which to adjudicate the individual's trustworthiness and reliability. 

b. (U/ /FOUO) Recommend that the Army, in conjunction with DoD, continue to seek 
authorization to review an individual applicant's cyber behavior as a component of the 
security clearance investigative process to maximize information to be made available 
for the adjudication process. Currently, cyber behavior is not reviewed because 
policymakers have not clearly defined "the legal and privacy limits" applicable to the 
Army's consideration of an ind ividual's cy ber behavior in the investigative and 
adjudicative process." (Email, ^HUHf 1 Feb11 (° 19 ))- 

c. (U/ /FOUO) Review procedures at Military Entrance Processing Stations (MEPS) 
to determine whether behavioral health issues are being properly identified and 
evaluated in assessing an applicant's suitability for military service. Further, consider 
whether more robust behavioral health assessments should be conducted for applicants 
seeking assignment to certain MOSs with access to highly classified national security 
information. 

d. (U// FOUO) Review procedures to ensure behavioral health or disciplinary issues 
arising during basic training and/or AIT are forwarded to the chain of command for 
further assessment or result in the appropriate DEROGs. 

e. (U/ /FOUO) Establish a training program in order to ensure that commanders and 
leaders at all levels understand their responsibilities when managing Soldiers with 
security clearances. This training should include not only information about the 
derogatory reporting process, but an enumeration of the factors on which leaders 
should alert when assessing an individual's suitability for access to classified 
information. These indicators should include those listed in the newly revised AR 381- 
12 (End Q22), as well as behaviors that may indicate a lack of mental stability, lack of 
judgment or lack of personal control. 

f. (U/ /FOUO) Ensure standardized processes are in place by which to notify 
commanders about individuals receiving behavioral health treatment with a view to 
facilitating commanders' continuous evaluation of personnel security. The 1 AD G-2 put 
in place a process to review behavioral health information for Soldiers holding a security 
clearance. This enabled the G-2 to assist the commander in making informed decisions 
regarding Soldiers' access to classified information. Rather than simply relying on the 
efforts of an experienced, knowledgeable intelligence officer to put such a program in 
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place, this process should be formalized in regulation. Any formal process must 
balance personnel security concerns with the imperative to encourage individuals to 
seek behavioral health assistance when necessary. 

g. (U/ /FOUO) Recommend that the Army establish conditions and standards to 
ensure that commanders understand the connection between certain conduct and an 
individual's eligibility for access to classified information. Consider modifying the DA 
Form 2627, Record of Proceedings Under Article 15, UCMJ, to require commanders to 
sign and acknowledge that they have considered the Soldier's actions and how they 
may relate to the Soldier's security clearance or suitability for access to classified 
information, and that appropriate action has been taken — ranging from no action to filing 
a report of derogatory information with the CCF with a view toward initiating clearance 
revocation. 

h. (U// FOUO) Recommend that the Army continue to support efforts such as the 
Army G-2's Comprehensive Security Resiliency program. Such initiatives will 
strengthen the personnel security and information security programs by enabling the 
commander's use of appropriate means of identifying high-risk behaviors, implementing 
a more robust security, education and training program within their commands, and by 
providing tools to better assist commanders and leaders in performing their duties 
related to safeguarding classified information. 
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Section IVC: Findings and Recommendations Pertaining to SCI Physical Security 

1. (U//TOUO) Findings. 

a. (U/ /FOUO) Regulatory Issues. 

(1) (U//FOUO) DoD and Army regulations are outdated. DoD 5105.21-M-1 (End 
Q24) predates DCID 6/9 (End Q25) by 4 years. AR 380-5 (End Q1 1 ) predates DCID 
6/9 by 2 years. Both the DoD and Army regulations fail to implement DCID 6/9 policy 
regarding entry/exit inspections, even in the face of DCID 6/9 instructions to Cognizant 
Security Authorities (DIA for DoD) to establish such policy and procedures. Although 
DCID 6/9 has been rescinded and will shortly be replaced by Office of Director of 
National Intelligence, Technical Specifications for Construction and Management of 
SCIFs, the new ODNI policy contains a similar requirement to incorporate "personnel 
and package inspection procedures" in SCIF SOPs. (ODNI Draft Tech Spec, paragraph 
D.7, xx Jan 1 1 (End Q60)). 

(2) (U/ /FOUO) Army regulations fail to address the impact of modularity and the 
proliferation of SCIFs at the BCT-level and below. The physical security regulations 
were written prior to Army modularity and do not account for the number and 
sophistication of intelligence assets and capabilities located in a BCT. Further, the 
regulatory oversight provisions that set out duties and responsibilities of security 
personnel are focused on the senior intelligence officials (SIO) for each unit. By 
regulation, the SIO should be an 0-5 or 0-6, which would generally preclude a BCT S-2 
(usually an 0-4) from being an SIO and executing the corresponding responsibilities. 
This sets up a situation in which a BCT SSR would report to the DIV SSO, who reports 
to the DIV SIO; the BCT S-2, who is generally the BCT SSR's supervisor, is nowhere to 
be found in the SCIF physical security chain of responsibility. The regulations also do 
not account for BCTs deploying separately from their organic division headquarters, and 
the corresponding challenges that presents to a Division G-2 charged with providing 
requisite oversight to his functional counterpart in the BCT. 

b. (U//FOUO) Unit Issues. 

(1 ) (U/ /FOUO) This investigation did not uncover any evidence that PFC 
Manning accessed, downloaded or made an unauthorized disclosure of TS/SCI. While 
we do not believe that SCI was a part of any unauthorized disclosure, the rules and 
policies regarding SCI are relevant because PFC Manning is alleged to have 
downloaded other classified information in a SCIF. This prompted an examination of 
the physical security measures implemented within the SCIF. Further, although PFC 
Manning could have downloaded classified information from any SIPRNet computer 
outside the SCIF, the amount of access (measured in terms of time spent on the 
SIPRNet computer) that PFC Manning had was directly related to his MOS as an 
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intelligence analyst and his official duties in the SCIF. That said, commanders and 
leaders must be aware of the potential security risk associated with all SIPRNet 
computers, not just those located in SCIFs. 

(2) (U/ /FOUO) The unit failed to enforce appropriate standards by not strictly 
enforcing the regulatory prohibition on the use of personally-owned rewritable media in 
the SCIF. 2/10 MTN personnel should not have been permitted to introduce personally 
owned rewritable media into the SCIF in violation of DIA policy. (DIA SCIF PED Policy, 
25 Aug 06 (End Q18)). However, the total lack of SCIF entry and exit inspections 
precluded the SCI security personnel's informed assessment of the content and 
capability of media introduced into the SCIF. Even if rewriteable media were deemed 
necessary to accomplish the 2/10 MTN mission, personally-owned rewriteable media 
should have been barred absolutely. Further, the insertion of rewritable media into a 
SIPRNet computer should have resulted in the classification and subsequent handling 
of that media as classified (AR 25-2, paragraph 4-17, 24 Oct 07 (End Q3)). 
Additionally, 2/10 MTN should have a system to account for the use of government- 
owned rewriteable media and to mitigate the risk associated with their use. (DIA SCIF 
PED Policy, 25 Aug 06 (End Q18)). 

(3) (U/ /FOUO) Entry/exit inspections may have served as some deterrent. 
Entry/exit inspections were not required by DoD or Army regulations, however, as 
stated in AR 380-5, such inspedions (although not required) are an effective tool that 
can be used in command security programs to deter and deted the unauthorized 
removal of classified information from a SCIF. (AR 380-5, paragraph 6-36, 29 Sep 00 
(End Q1 1)). Further, PFC Manning's repeated reference in his blogs to the lack of 
physical security at the 2/10 MTN SCIF indicates that a robust entry/exit inspedion 
program may have served to deter some of PFC Manning's alleged adivities. 

(4) (U/ /FOUO) SSR training was inadequate. There exists no standard 
requirement to regulate the scope and extent of training required for SSRs. Regulations 
simply state that the SIO must ensure the SSO and SSR are trained to condud their 
duties. DIA has developed training for SCI security personnel, but attendance at this 
training is not mandatory. The training received by 1LTMJ(was insufficient. One 
hour to review over 100 slides and to absorb all of the orte!nechnical information those 
slides contained was inadequate to ensure that an SSR has a complete understanding 
of his or her duties and responsibilities. A s the SSR for a SCIF that was geographically 
separated from its higher headquarters, ILTHHgJ received little or no oversight or 
gu idance i n carrying out her responsibilities. Because of this geographic disconned, 

T^gH needed to be able to understand and implement all of the necessary 
safeguards and procedures associated with SCIFs. Therefore, she should have 
received training commensurate with the 64-hour DIA SCI Special Security Personnel 
Course rather than the hasty one-hour training she received prior to deployment. 
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(5) (U/ /FOUO) Inadequate Oversight from Higher Headquarters. Other than the 
first accreditation inspection in November 2009, there were no other inspections or staff 
assistance visits to 2/10 MTN. The reliance by USF-I and USD-C on home station SSR 
training and appointment might make. sense from an operational and manpower 
perspective; however, these deployed headquarters must ensure that the proper 
standards are being followed. Inspections or staff assistance visits would provide some 
oversight, and would assist higher headquarters in fulfilling their responsibilities for the 
oversight of SCI security measures. 

2. (U//FOUO) Recommendations. 

a. (U/ /FOUO) Recommend that the Secretary of the Army direct a review of AR 
380-5 (End Q1 1 ) for consistency with current ODNI SCIF policies and consider 
changes to bring AR 380-5 in line with those policies. The Army should establish 
mandatory entry/exit or "personnel and package" inspections, to include inspections of 
SCIF personnel, and require routine inspections and staff assistance visits by higher 
headquarters. 

b. (U//POUO) Recommend that the Secretary of the Army propose to the Secretary 
of Defense that he direct a review of DoD 5105.21-M-1 (End Q24) to identify any 
inconsistency with current ODNI SCIF policies. 

c. (U//FQUO) Recommend that the Army prescribe SCI Physical Security guidance 
and/or revise Army regulations to ensure appropriate polides are in place for tactical 
units in a modular Army. Specifically, the guidance should clearly establish the roles 
and responsibilities of a BCT S-2 with regards to SCI physical security. 

d. (U//FOUO) Recommend Army regulations or policies establish the training 
standard for SCI Security Personnel. The Army should consider mandating attendance 
at DIA's SCI Security Personnel Training for all SSOs and SSRs (especially those SSRs 
who will be operating a SCIF that is geographically separated from its higher 
headquarters). 
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Section IVD: Findings and Recommendations Pertaining to Behavioral Health 

1. (U//FOUO) Findings. 

a. (U//FQUO) Neither a command-referral nor self-referral to Behavioral Health 
currently triggers a security clearance assessment for the Soldier concerned. This may 
be acceptable for self-referrals, but not for command referrals. If a Soldier's behavior is 
such that a command-referral is warranted, a security clearance assessment should be 
mandatory. In this case, the chain of command failed to take appropriate action. 

b. (U/ /FOUO) Current behavioral health regulations and practices are insufficient to 
provide the necessary guidance regarding an individual with a security clearance. The 
DA Form 3822 does not address access to classified information. The unapproved 
"MEDCOM Form 4038" used by PFC Manning's behavioral health providers contained a 
section regarding access to classified information. However, the form allowed the 
provider to delete the section and did not require the provider to express an opinion 
about a patient's access to classified information. 

c. (U/ /FOUO) Behavioral health care providers lack understanding of when and how 
behavioral health issues could or should impact a command er's decision to suspend an 
individual's access to classified information. CPT U ; | indicated that he would not 
have recommended suspension of PFC Manning'^icces^o clas sified inform ation 
based on his 22 Ma y 2010 evaluation. During that evaluation, CP~fl| I stated 
that PFC Manning ^ 

■ recommended that a 




notwithstanding these rather specific and concerning findings, 
maintained that he would not have recommended suspending PFC 
Manning's access to classified information . (Behavio ral Health Records, 22 May 10 
(Ends M 1 -26 and M1-27); Interview MFR, 25 Jan 11 (End E17-3)). CPT 

another behavioral health care provide^ndicated that he would only 
recommend suspension of an individual's access to classified informatio n if the 
behavioral health diagnosis was "psychosis." (Interview MFR, HHH 24 Jan 1 1 (End 
E90-1)). 

2. (U//FOUO) Recommendations. 

a. (U/ /FOUO) Providers should discontinue the use of the unapproved and unofficial 
"MEDCOM Form 4038." MEDCOM should consider revising DA Form 3822 to meet the 
needs of providers when treating Soldiers with behavioral health problems who have 
access to classified information. 
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(1) (U/ /FOUO) DA Form 3822 should be modified to include a discrete block 
requiring the behavioral health care provider to provide his or her assessment of 
whether the Soldier should have or retain access to classified information. Mandating 
such an assessment in each and every case would highlight the importance of 
addressing the "insider threat" and the security of classified information. 

(2) (U/ /FOUO) Providers should assess the potential impact of a Soldier's 
diagnosis or condition on continued access to classified information in all behavioral 
health evaluations, whether self-referred or command-directed. Nothing in MEDCOM 
Reg 40-38 or on DA Form 3822 mandates use of that form for self-referrals. Thus, 
there is no mechanism requiring a care provider, in the context of a self-referral, to 
consider questions that the Army and MEDCOM have deemed criti cal in conte xt of a 
Command-Directed Behavioral Health Evaluation. (Interview MFRjJiJgg^d. 25 Jan 
11 (End E1 7-3)). 

b. (U/ /FOUO) A finding of serious risk to self, others or mission should result in 
command notification in accordance with DTM 09-006, July 2, 2009 (DTM 09-006) (End 
Q39), a command assessment of the Soldier's suitability for access to classified 
information and an affirmative determination as to whether a derogatory report should 
be forwarded to CCF. 

c. (U/ /FOUO) Behavioral Health Regulations Training Deficiency. Our finding is that 
the Directive Type Memorandum (DTM) 09-006, Subject: Revising Command 
Notification Requirements to Dispel Stigma in Providing Mental Health Care to Military 
Personnel is adequate in its identification of the conditions necessary for behavioral 
health providers to notify commanders when there is a risk to self, others, or the 
mission. The issue is in training both the behavioral health providers and the 
commanders. Recommend the Army review the training on and implementation of DTM 
09-006 to ensure behavioral health providers and commanders understand the policies 
regarding commanders' access to mental health information. This information can be 
critical for commanders in making decisions regarding individuals' access to classified 
information. 

d. (U//FOUO) Training. 

(1) (U/ /FOUO) Behavioral Health Care Providers. Army and MEDCOM must 
develop enhanced training to heighten awareness within the medical community of 
indicators of an "insider threat." For example, behavioral health care providers should 
consider the frequency of the visits by a Soldier, whether that Soldier has prior 
deployments, what the Soldier does on- and off-duty, whether the Soldier has engaged 
in prior acts of violence or substance abuse, the Soldier's MOS and whether the Soldier 
has access to classified information. 
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(2) (U/ /FOUO) Commanders and Leaders. Commanders and leaders must be 
trained on the differences between self-referrals and command-referrals. Specifically, 
commanders and leaders must be aware of the information to which they are entitled 
and the information to which they are not entitled in each situation. Further, 
commanders and leaders must receive training that assists them in identifying when 
behavioral health issues should impact an individual's access to classified information. 
One method to place command emphasis on this issue would be to create a graphic 
training aid (a wallet card) identifying when commanders should consider a command- 
referral to Behavioral Health and the differences between a command-referral and a 
self-referral. 

e. (U// FOUO) Review mandatory disclosure standards. The Secretary of the Army 
should consider directing the Army medical community to review whether standards for 
mandatory disclosure to the chain of command are: 1) clear and unambiguous; 2) 
comprehensive; 3) uniform across the Army; and 4) the subject of appropriate training 
and emphasis. Finally, the Army medical community should consider the merit of 
developing enhanced procedures for the evaluation of Soldiers with access to classified 
information. 

f. (U//FOUQ) The Secretary of the Army should recommend that the Secretary of 
Defense review DoDI 6490.1 and DoDI 6490.4 to determine if they should be revised to 
require a behavioral health care provider to render a written assessment of a patient's 
"suitability for access to classified information" as part of each and every behavioral 
health evaluation and to discuss that assessment with the Soldier's commander, without 
regard to whether the Soldier self-referred or was command-directed to seek behavioral 
health care. 

g. (U/ /FOUO) Any change to behavioral health policy should take into consideration 
the Report of the DoD Task Force on Mental Health. It is critical that the Army continue 
its efforts to encourage Soldiers to seek early intervention in addressing their behavioral 
health concerns. However, the Army must strike an appropriate balance between the 
needs of the individual and the preservation of our national security. When a Soldier 
engages in behavior that calls into question his or her reliability or trustworthiness, steps 
must be taken to limit his or her access to classified information. Further, when a 
behavioral health care provider determines that an individual is a serious risk to self, 
others or mission, steps must be taken to safeguard both the individual and national 
security. (DoD Task Force on Mental Health Report, "An Achievable Vision: Report of 
the Department of Defense Task Force on Mental Health Final Report," June 2007 
(Q67)). 
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SECTION V: Individual Accountability 

1. (U/ /FOUO) In accordance with my appointment memorandum, I thoroughly 
investigated the potential individual accountability of those personnel with command or 
supervisory responsibility for PFC Manning, as well as those with responsibility for the 
systems and processes that did not operate in accordance with applicable standards or 
regulations. Specifically, I considered individual accountability for: 1) those personnel 
in PFC Manning's UCMJ and Administrative Chain of Command; 2) those in PFC 
Manning's technical (i.e., intelligence/S-2) chain of command/supervision; and 3) those 
personnel with responsibilities and duties, direct or supervisory in nature, to safeguard 
and secure both classified and sensitive information, as well as to ensure the security of 
the network (i.e., SIPRNet) used to store and transfer such information. 

2. (U/ /FOUO) In making my findings and recommendations, I considered the totality of 
the circumstances as revealed in this investigation and assessed responsibility. I 
considered the full range of options available to me as a commander and consistent 
with paragraph 2c of the 16 December 2010 appointment memorandum. I reached my 
final decisions only after a comprehensive review of all evidence available to my 
investigation. 

3. (U//POUO) My investigation considered the responsibility and accountabili^ 
personnel ranging from Division Staff to the BCT Commander, COLj3^J^UU9|, to 
the t wo Team Leaders with direct oversight of PFC Manning, SP(Jm ^nd 
SPCmgffijym^m At figure 9 below is a list of all personnel tha^er^valuated 
for personan^sponsiDility and accountability related to the Wikileaks incident (i.e., an 
Accountability/ Responsibility Matrix) and my determination as to each. 




5. (U// FQUO) While the investigation uncovered leadership failures, technical failures, 
or both by some personnel in the addressing PFC Manning's conduct and behavior, 
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(including conduct warranting his referral to Behavioral Health), none of these failures 
absolve PFC Manning of any alleged criminal activity. 12 



ALL Dkdfmmm Might an tfemra* Officer Urwr 



Counseling / 


Reprimand 


Nonjudicial 


Separation / Show 


Court-Martial 


Admonition (Verbal 


(Verbal/Written) 


Punishment 


Cause 


(Summary / BCD / G CM) 


/Written) 




(Art. 15) 







||Gtfr, 2/10 BCT) 



| (Cdr, 2/10 BSTB) 



I (xavioicn 



|(MND-B/lftCAVG6) 



I (USO-C/lstADGC) 



|(MND-8/UtCAV- 1AM) 



I (USTJ-C/UtAO-lAM) 



I (2/10 BCT S4) 



| (2/10 BCT 52) 



I (Cdr, H HQ 2/10 BCT) 



| (Cdr, HHC.2/10 BCT) 



I [156, HHC, 2/10 BCT) 



| (BCT LAM B AS4, 2/10 BCT) 



| (AS2end Cdr, MKX) then $2,2/10 BCT) 

| (S2 Night Shift OK. 2/10 BCT) 
| (Mam then AS2 under Cpt|B| 2/10 BCT) 
| (Teem Chief 2/10 BCT, Fusion CtH OK} 
| (SSK. 2/10 BCT) 
| (Fusion OjH OK) 
| (2/10 BCT MSO) 
| (2/10 BCT MSO) 
| (Then SSG-Ph Sftend Fusion MCOK, 



| (S2 MCOK, 2/10 BCT) 

| (S2NCO, 2/10 BCT) 



| (Intai Anetyst, 2/10 BCT) 
I (Teem Ldr, 2/10 BCT) 




Figure 9. Accountability/Responsibility Matrix. (U// FOUO) 

6. (U/ /FOUO) Specific findings and recommendations pertaining to each individual 
referenced in Figure 9 above are addressed below. 



12 (U/ /FOUO) Nothing uncovered during this investigation absolves PFC Manning of personal 
responsibility for his alleged disclosure of sensitive and classified information. Likewise, nothing 
uncovered during this investigation regarding PFC Manning's behavioral health issues appears to relieve 
him of responsibility for his alleged disclosure of sensitive and classified information. Of note - the 
investigative charter did not include a formal psychiatric assessment of PFC Manning and none was 
conducted. 
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(U//POU©) COL | ■ r (Cdr, 2/1 0 MTN). As the BCT Commander, COL 

_ had the uttimaterespons^^ everything that happened within his 
orga nizatio n. However, after considering all the facts and evidence, I do not find that 
COL | I was derelict in his duties or otherwise failed to fulfill his responsibilities as a 
commander. During the cours e of the investig ation, th ere were four specific areas that I 
focused on with regard to COL J | 1 ) COL H| systems and procedures for 
maintaining situational awareness and oversighHegarding his brigade; 2) PFC 
Manning's deployment, retention in theater and continued access to classified 
informat ion; 3) the security of the 2/10 MTN SIPRNet; and 4) the decision to retain MAJ 
" as Brigade S-2. 



(1) (U// FOUO) I find that COL I I implemented appropriate programs and 
information gathering measures to understand personnel and problems going on within 
his organization. PFC Manning's self-refer red be havioral health concerns were never 
elevated to his level of command and COL ■ | had no reasonable means of obtaining 
that information absent notification from MSG^JU or behavioral health care 
providers. 



(2) (U//POUO) PFC Manning. COL | | was the Commander of 2/10 MTN at 
all times relevant to PFC Mannin g's s ervice witn the BCT. However, prior to the 8 May 
2010 assault of SPC | HHCOL|| I had not been informed of PFC Manning's 
prior misconduct, anomalou^ehavior^^ehavioral health concerns. COLH | was 
not provided any information by PFC Manning's supervisory chain or subordinate 
commanders that would have given him reason to question PFC Manning's deployment, 
retention in theater or continued access to classified information. F urther , as PFC 
Manning had two intermediate commanders, I did not find that COL ■ | was in a 
position where he should have known of the in cidents rela ted to PF<^Manning. When 
first notified of PFC Manning's assault on SPC ■ |, the new HHC Commander 
had already taken appropriate action to remov^P^Manning from the SCIF and to 
initiate UCMJ action. The company commander also initiated a derogatory report 
through appropriate channels and a command-directed behavioral health evaluation in 
contemplation of ad ministrative separation for misconduct in accordance with AR 635- 
200. As COL | | had no knowledge of PFC Manning's behavior, I do not find any 
failure on his part in regard to this issue. 



(3) (U/ /FOUO) S ecurity of the 2/10 MTN SIPRNet. LTCl I the 2/10 

MTN XO, informed COL Hj | that there was un authorized meaisK)rnn^lPRNet that 
was impacting network connectivity. LTC | | advised him that the situation was 
being addressed and that action was bein^aken to clear the system and obtain better 
syst em conn ectivity. No other iss ues or concerns regarding the SIPRNet were raised to 
COLm level. I find that COL | | properly relied on his XO to address the 
problems posed by unauthorized media on the SIPRNet. 
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(4) (U/ /FOUO) Deci sion to R etain MAjHHBm I as Brigade S-2. COL 

Hwas awa re that M AJ MB | was technicall^eTiaen^^he S-2 and considered 
cing MAJ ■ | : I afteHne luly/August 2009 JRTC rotatior^However, in 
consultation witrHii^O COL JH| decidecHc^fford MAJl |4j | the opportunity to 
correct his deficiencies, believin ^nat MAJj, H| could be^u^ssfu^ittUiis XO's 
guidance and mentorship. COLB| I also designated COL (then LTC)H| l^he 
BSTB Commander and a Militar^ntelligence Officers a mentor to MAJJ • , I 
These appro priate me asures notwithstanding, COL^ | decided, in January 2010, to 
replace MAJ |fl| I with another officer, CPTBB a^Hnoved MAJ HHj J to a 
Stability TransmorHeam (STT). While I find thaTOAJJUJ condoned a 
dysfunc tional leadership style in the S-2 sectio n, I find no inappropriate a ction or f ailures 
by COL J| | in his handling of MAjJ^H. his decision to afford MAJ^H| an 
opportunrt^o overcome his deficiencies^!™ COLHjjjH subsequent removaHiction. 



b. (U//POUO)COLjMpi | (Cdr, 2/10 BSTB). COL (then LTC)HBB BSTB 
Commander, was theBarttaliorH^el commander for all Soldiers assigne^^HrlC, 2/10 
MTN (PF C Mann ing's company). After considering all available evidence, I do not find 
that COL|m| was derelict in his duties or otherwise failed to fulfill his responsibilities 
as a commander. 

(1) (U//FQUQ) No Direc^esponsibility. COLB| I hadno direct responsibility 
for the Brigade S-2, MAJ H| | or the s " 2 personnen^uLl (jj | was not informed 
of PFC Manning's prior misconduct, anomalous behavior or b ehavior al health concerns, 
and had no reason to know of PFC Mann ing's beh avior. COLB J | attempted to 
provide mentorship anc^uidance to MAJ | 1 L but in D ecember 2009, finally 
recommended to COL| | that he remov^MAJj| | from the position of S-2. 

(2) (U//FOUO) Contemplated Action: I find COL HHI actions in relation to 
this investigation were reasonable and consistent with tha^xpected of our battalion- 
level commanders. I specifically find no action or inaction on the part of COLp££ 
warranting administrative or disciplinary action. 

c. (U//POUO)JJjC^Bpjpj (XO, 2/10 MTN). I find that LTCB^ was 
deficient in his managemen^n^u^rvision of the S-2 section and in ni^versight of 
the security of 2/10 MTN classified network. 

(1) (U//FOUO) Management and Supervision of the S-2 Section. As the XO, 
LTC^H had the primary responsibility to manage and supervise the varied Brigade 
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Staff Sections, to include the S-2. LTC ■■j^asdeficient in his m anagement and 
supervision of the S-2 section. Although Liqijgjffl| recognized M AJ|^SsH9i 
technical deficiencies, he failed to recognize that the leadership stmctu r^witmn the 
entire S-2 Section was dysfunctional. This failure allowed MSG Hg| to usur P the 
authority of both Officers and other NCOs by preventing them from exercising their 
supervisory responsibilities over the junior enlisted Soldiers in the S-2 Section, to 
include PFC Manning. He failed to identify the turmoil and trouble pervading the S-2 
Section or to root out the "keep it in-hous e" minds et that existed there. These failures 
on the part of LTC facilita ted MSG HH| ability to hide most of PFC Manning's 
conduct and anomalous behavior from th^hain of Command. 



(2) (U//EQUQ) Overs ight of the Security of the Classified Network. The S-6 
section informed LTC UB o f the pre sence of unauthorized media on the classified 
network. Once informed^JTC HHtook initial steps to address the problem; 
specifically, he told staff personnel to remove all unauthorized media by a date certain. 
However, he failed to follow up on his guidance and ensure that no further violations of 
network security occurred. 




d. (U//FOUO)LICj 



(MND-B/1CD G-6). 



(1 ) (U// FOUO) LTC was the G -6 for MND -B when 2/1 0 MTN arrived in 

theater. As the Division G-^o^/10 MTN, LTCjgJgjJgyjhad overall responsibility for 
the tactical network. He was responsible for ensuring that all subordinate units, to 
include 2/10 MTN, wer e certified and accredited prior to operating on the theater 
network. LTC |9HH failed t0 exercise proper supervisory responsibility to ensure that 
the 2/10 MTN network was certified and accredited in accordance with applicable 
regulations and were properly inspected. At all times relevant to this investigation, the 
2/10 MTN network remained uncertified and unaccredited, operating in violation of DoDI 
8500.2, CCR 25-206, MNF-I Directive 25-1 and AR 25-2. 





e. (U//PQUQ) LTC I 



(USD-C/1AD G-6). 



(1 ) (U/ /FOUO) LTCgH| was the G-6 for USD-C after 1 AD relieved MND- 
B/1CD in place and assumecn^sponsibilities as USD-C in January 2010. LTC|gQH| 
had overall responsibility for the tactical network. He was responsible for ensuring! 
all subordinate units, to include 2/10 MTN, were certified and accredited prior to 
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operating on the theater network. LTCHH|| failed to exercise proper supervisory 
responsibility to ensure that the 2/10 M^^ietwork was properly certified and accredited 
for operation and property inspected. At all times relevant to this investigation, the 2/10 
MTN network remained uncertified and unaccredited, operating in violation of DoDI 
8500.2, CCR 25-206, USF-I 25-1 and AR 25-2. 



(1 ) (U/ /FOUO) As the Higher Headquarters Information Assurance Manager 



units, to include 2/10 MJt 



property certified and accredited their networks prior to 



(IAM) for 2/10 MTN, MAJ HH was directly responsible for verifying that all subordinate 

["NHJad properiycertifi 
operating on the theater network. MAJ Jj^H fai,ed t0 veri fy that the 2,1 ^ TN network 
was properly certified and accredited for operation. Additionally, MAJ ^failed to 
conduct required inspections of the network. At all times relevant to this investigation, 
the 2/10 MTN network remained uncertified and unaccredited, operating in violation of 
DoDI 8500.2, CCR 25-206, MNF-I Directive 25-1 and AR 25-2. 










I 

g. (U//FQUQ4 MA, 
(1) (U/ /FOUO) MAJ 





(USD-C/1st AD IAM). 

was the IAM for USD-C after 1AD relieved MND- 



B/1CD in place and assumed responsibilities as USD-C in January 2010. MAJBH^j 
was directly responsible for verifying that all subordinate units, to include 2/10 MtnT 
properly certifi ed and a ccredited their networks prior to operating on the theater 
network. MAJ 03UHJH failed to verify that the 2/10N£TN network was properly certified 
and accredited for operation. Additionally, MAJ failed to conduct required 

inspections of the network. At all times relevant uHnisirivestigation, the 2/10 MTN 
network remained uncertified and unaccredited, operating in violation of DoDI 8500.2, 
CCR 25-206, USF-I Directive 25-1 and AR 25-2. 
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h. (U//POUO)MAJJ 



(S-6, 2/10 MTN). 



(1 ) (U// FOUO) As the 2/1 0 MTN S-6, MAJ | | had overall responsibility for 
the 2/10 MTN network. He was responsible for ensuring that the 2/10 MTN network 

Sperly certified and accredited before operating on the thea ter network. MAJ 
also had supervisory oversight, with his Assistant S-6, CPlJ | over the 

10 MTN network and its operations. MAJH|H failed to exercise proper 
supervisory oversight and responsibility to ensure timel^ertification and accreditation 
of the 2/10 MTN network. At all times relevant to this investigation, the 2/10 MTN 
network remained uncertified and unaccredited, operating in violation of DoDI 8500.02, 
CCR 25-206, MNF-I Directive 25-1, USF-I Directive 25-1, and AR 25-2. 



i. (U//EQUQ} MAJ 



(S-2, 2/10 MTN). 



(1 ) (U// FOUO) MAJ| I failed to properly supervise and manage the 
personnel in the S-2 Section^^bdicated his responsibilitWc^upervise all S-2 
personnel, Officer and enlisted, instead deferring to MSGHI (his NCOIC, to 
address all enlisted issues at his level. He allowed, and acflvel^lnderwrote, MSG 

B efforts to strip supervisors, Officers and NCOs alike, of their responsibility over 
nate enlisted personnel. In so doing, he crea ted a dysfunctional and unclear 
leadership scheme. He also facilitated MSGj[| | ability to withhold information and 
decisions to himself, keeping the HHC Compan^ommander and First Sergeant 
uninformed regarding misconduct and anomalous behavior by S-2 Section personnel. 
He also fostered an environment where critical information was hidden from the Chain 
of Command and kept within the S-2 Section. Th^jysfunctional environment MAJ 

B fostered and encouraged allowed MSGjB | to make command-level 
s without command awareness or input, sucr^is: whether to deploy PFC 
Manning; whether to direct a behavioral health evaluation or to allow the PFC Manning 
to self-refer; whether disciplinary action would be a consequence of PFC Manning's 
misconduct; and whether action would be taken to suspend PFC Manning's access to 
classified information. 




j. (U//POUO)MA 



(Cdr, HHC, 2/10 MTN). 

(1 ) (U/ /FOUO) MAJ | | was the HHC Commander from 28 April 2009 to 17 
April 2010. He had overall responsibility for the care and discipline of all Soldiers under 
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his charge (to include PFC Manning), and was required to maintain awareness of all 
situations that might adversely affect the mis sion or t he well-being of his personnel. 
Despite having a critical leadership role, MAJ^p|| was woefully ignorant of PFC 
Manning's actions and the impact they were havinc^nUhe S-2 Section. Likewise, MAJ 

« was woefully ignorant of the impact MSGH|H actions were having on the S-2 
i and its personnel. Despite being uncertain a to whether his First Sergeant 
was aware of what was happening in the S-^MAJH| | willingly abdicated his own 
responsibility for command oversight. MAJ W/K/fon\y\ command involvement 
regarding PFC Manning appears to be his aeaslorno direct PFC Manning to submit to 
a behavi oral health evaluation after his 20 December 2009 outburst in the SCIF. MAJ 

• ■ failure as a leader extended beyond his ignorance of PFC Manning's situation. 
H^Imngly and knowingly abdicated his responsibility over enlisted personnel issues to 
the various section NCOICs, in essenc e deleg ating his non-delegable command 
authority. Making matters worse, MAJ HHf failed to check on, manageand 
supervise those personnel to whom he aelegated his authority, MSGH^H in the S-2 
Section among them. MAJ was i gnorant of the real commancramcture within 

>acnnat 



the S-2 Section and the impact that MSG | | was having on operations and the 
morale and welfare of his Soldiers. 



k. flj//EQUQ)CPTl 



(Cdr, HHC, 2/10MTN). 



(1WU//POUO) CPT| | assumed command of HHC in April 2010 from 
MAJHHI Immediately uporH) ecoming aw are of PFC Manning's misconduct (i.e., 
the 8 Ma^2010 assault upon SPCH^ ■), CPTH| k f took decisive and 
immediate action to remove PFC Manmn^rom the SCIFJ^nitiate a command- 
directed behavioral health evaluation in contemplation of administrative separation for 
misconduct in accordance with AR 635- 200, and to administer a Company Grade Article 
15 for PFC Manning's misconduct. CPT HHH als0 completed a DA Form 5248-R, 
Report of Unfavorable Information for Secunt^ eterminati on, to suspend PFC 
Manning's access to classifie^nforrration. CPTj-^U ■ J took these actions within 48- 
hours of the assault on SPC | "| and befor^m^megation arose as to the 
potential compromise of classme^nformation by PFC Manning. 
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(U//p©UO)lSG| 



(1SG, HHC, 2/10 MTN). 



(1 ) (U// FOUO) 1 SG I I like MAJ I | managed from afar, lacking the 
situational awareness necessary to accomplisrHh^riission and take care of Soldiers. 
As the HHC 1SG from the time that PFC Manning arrived at the unit until March 2010, 
he had primary responsibility for the enlisted Soldiers under his charge and was 
required to maintain situational awareness of all situations that might adversely affect 
the mission o r the well being of his personnel. Despite having a critical leadership role, 
1SG I | was ignorant, either willfully or through neglect, of PFC Manning's actions 
and theHmpact they were h aving on the S-2 Section. Likewise, 1S GJHJ| was 
ignorant of the impac^SG H|H actions were having on the S-2 Section and its 
personnel. 1SG HH| willmgl^D dicated his responsibility to provide command 
oversight over th^^^ection. 1SG f/^ I only involvement with PFC Manning 
appears to hav e been a counseling sesslorwollowing his 20 December 2009 outburst in 
the SCIF. 1SG | | failed to recommend any further inquiry or investigation into the 
incident and failecH^onsid er whethe r PFC Manning should continue to have access to 
classified information. 1SG H|^H failure as a leader extended beyond the handling 
of PFC Manning's anomalou^enavior. He willingly and knowingly abdicated his 

S Ability over enlisted personnel issues to the various section NCOICs. 1SG 
failed tocheck on, manage and supervis^hose NCOs subordinate to him, 
ic^SG ■ | in the S-2 Section. 1 SG | | was unaware of the fact that 
MSG I | haculsurped the role of Officers a ncHtner NCOs alike in making PFC 
Man nin^nis sole responsibility. 1 SG I | lack of command presence in the S-2 
Section created an unacceptable gap THeaaership stemming from hi s unre asonable 
reliance on others to take care of enlisted matters. According to 1 LT I HJL it appeared 
as if the 1SG didn't care about the S -2 Secti on becau se the 1S G anc^^^ection were 
not co-located. While I believe 1 SG ■ | and MAJ I | leadership failures 
mirror each other, ult imate re sponsibrnt^or running a Company resides with the 
Commander. If MAJ | I performed his duties as expected, perhaps 1SG f 
would have done so a^elT 



m. (U//l=OUO)CPl] 



(IAM and AS-6, 2/10 MTN). 



(1) (U/ /FOUO) As the 2/10 MTN Assistant S-6 and Information Assurance 
Manager, CPTll had responsibility for the 2/10 MTN network and its security. 
He was responsibl^o^nsuring that 2/10 MTN's network was prope rly certified and 
accredited before operating on the theater network. CPTJB ^iad direct oversight 
over the entire 2/1 0 MTN network and its operations. CPm| | failed to take the 
requisite measures to timely certify and accredit the 2/10 M^Hietwork and failed to 
adequately secure the network as it was his duty to do. At all times relevant to this 
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investigation, the 2/10 MTN network remained uncertified and unaccredited, operating 
in violation of DoDI 8500.2, CCR 25-206, MNF-I Directive 25-1, USF-I Directive 25-1 
and AR 25-2. 



(5). (b»f6) 



n . (U//POUO) CPT | | (AS-2 and Cdr, MICO, then S-2, 2/10 MTN). 

(1) (U/ /FOUO) Upon deployment with 2/10 MTN, CPTB| was serving as both 
the Assistant S-2 (AS-2) and the Military Intelligence Compan™ommander. He had 
served in these positions from 6 February 2008 through January 2010. As the AS-2 he 
had or should have had situational awareness of all personnel-related issues within the 
S-2 Section. He also had the ability to influence and supervise S-2 operations. On or 
about 1 January 2010, CPT(| assumedduties as the Brigade S-2. During his time as 
AS-2 and S-2, CPT(j allowed MSGjlH| to personally handle enlisted personnel 
issues, to include those related to PFC^anning, to the exclusion of the Chain of 
Command (i.e., Company Commander and First Sergeant). CPT| | allowed MSG 

Sto effectively "cut out" PFC Manning's first and mid-level supervisors from 
,)atincMn decisions regarding his care and discipline. Additionally, while AS-2 and 
S-2, CPT allowed unauthorized media to be placed on the classified network and 
failed to take decisive corrective action in a timely manner. Finally, CPT| I failed to 
ensure that classified materials were not removed from the SCIF for non^rncial 
purposes. 

(2) (U/ /FQUO) While serving in multiple positions and transitioning between 
several key positions, CPTH| faced significant challenges as noted above. Once 
afforded the opportunity to focus on his S-2 duties, CPTlB took responsibility for the 
S-2 section and immediately identified the l ack of le adership for Soldiers on the night 
shift. He implemented a plan to have MSGH u | perform swing shift duties to address 
that issue. In addition, he moved PFC Manning? the day shift, where PFC Manning's 
conduct could be managed by supervisors. CPTj| took action to reorganize the S-2 
section in a manner that allowed the Brigade to conduct its overall mission more 
efficiently. 



o. (U//EQUQ»CPT| 



(S-2 Night Shift OIC, 2/10 MTN). 



(1) (U/ /FOUO) CPT(B| was a branch-detailed Military Intelligence officer who 
deployed immediately to Ira^fter arriving at Fort Drum from his transition course in 
October 2009. Shortly after his arrival at 2/10 MTN, he was made the officer-in-charge 



103 

UNCLASSIFIED/ /FQR OFFICIAL USE ONLY 



UNCLASSIFIED// FOR OFFICIAL USE ONLY 

ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



(OIC) of S-2 night operations, a position he held for less than five weeks before being 
moved to a battalion intelligence s ection. During that time, PFC Manning exhibited no 
conduct warranting action on CPTEEB part. 



(b) (5), (b) (6), (b) (7)(C) 




p. (U/ /FOUO) CFTHQ^mgi (S-2 Plans and then AS-2, 2/1 0 MTN). 



(1) (U/ /FOUO) CPTHBp| served as an S-2 Plans intelligence officer and then 
as Assistant S-2 under CPlTBpifter he assumed duties as S-2 in Janu ary 201 0. 
Although she would task PF^Manning and those in the fusion cell, CPTBMT had no 
supervisory responsibility over PFC Manning until she assumed the role otaS2. From 
the ti me of CPT flBM assumption of duties as AS-2 until PFC Manning's assault on 
SPC PFC Manning exhibited no conduct warranting any action on her part. 

Attho^lffFCTlanning senttwoemails that should have raised red flags during CPT 
mfciflB time as AS-2, CPT neither knew, nor had reason to know, of the emails 

onnelr content. 



(b) (5). (b) (6). (b) (7)t 

J 



q. (U//FQUO) iLTjgg|g| (S-2 Team Chief, 2/10 MTN). 

(1) (U/ /FOUO) 1LTJH deployed to Iraq in February of 2010. She was 
originally made the Sunni Team Chief and la ter the OIC for the fusion cell. From 
February through 8 May of 201 0, 1 LT ||H P erformed her duties and cared for the 
Soldiers under her charge. Although sn^iad heard stories about PFC Manning, there 
were no incidents involving PFC Manning during this period that required a ction on her 
part. On 8 May 2010, however, the day after PFC Manning assaulted SPC BHHI 

noticed P FC Ma nning walking with MSG jf^KiH while still in the possession 
of his weapon. 1 LT concerned for the safety oHie^oldiers an^elievina that 
appropriate action hacUTot been taken to address the assault on SPC UR^||H[ took 
the initiative to contact the Brigade Judge Advocate and the Commanden^avise them 
of the assau lt and her current concerns about PFC Manning. As a result of her direct 
action, CPT^ggMQ| was able to take timely and appropriate action to remove PFC 
Manning fronHn^clF, command-direct PFC Manning for behavioral health evaluation, 
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administer nonjudicial punishment and complete a DA Form 5248-R, Report of 
Unfavorable Information for Security Determination, to suspend PFC Manning's access. 




(1) (U/ /FOUO) 1LT|H| was on orders as the 2/10 MTNSCIF Special Security 
Representative (SSR). Upor^leployment, she allowed MSG J | to handle the 
SSR's physical security duties while she handled security clearance issues (e.g., 
security clearance revi ews of personnel accessing the SCIF). This investigation found 
no evidence that MSGjHp| was either appointed as an SSR or thaUie ever attended 
SSR training prior to or during the deployment. As the SSR, 1Ll~m had overall 
direct responsibility for both the physical security of the SCIF and personnel security 
issues affecting the SCIF. Her duties included the obligation to take immediate and 
decisive action to correct security deficiencies such as the introduction of pe rsonal 
media into the SCIF and their use on SIPRNet computers. As the SSR, 1LTHH| 
should have identified SCIF security issues, concerns and vulnerabilities and taken 
measures to remedy or address them. She failed in her SSR duties. 









S. (U//f^U©)CW2 




(Fusion Cell QIC). 



(1 ) (U/ /FOUO) CW2 HHH was the fusioncelUeam leader with 

responsibility and oversight ove^/Ol (then SSG)BJ| | as well as PFC Manning. 
Notwithsta nding his positional authority and authorit^ommensurate with his rank, CW2 

2 | failed to properly exercis^hat authority. Throughoirtth^eriod that PFC 
Manninc^vas subject to CW2BL 1 | leadership, CW2lH| J was a ware of 
numerous issues related to Ph^Manning's conduct and beng io^Yet, CW2 1| 
took no action to address any of theseissues. CW2 |HHJ | rationale for noHaEng 
apprapriate action was that MSG| | was handlin^lreolaier issues. When MSG 

1 pailecUo take appropriate acflonTe^ PFC Manning's conduct and behavior, 
CW2| | still did nothing. CW2 JJH| | was a supervisor in name o nly, 
abdicann^Ti^esponsibilities over PFC^anning to MSGlHH When MSG! 
failed to take timely and appropriate action regarding PFC Manning, CW2i| ^ ' 
neither notified the chain of command of the numerous issues he observecuioHooK 
action himself to address the issues. 
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Kb) (5), (b) (6), (b) (7)(C) 



t. (U// FOUO) ^ ^ l^aiflj (IASO, 2/10 MTN). 

(1 ) (U/ /FOUO) CW2 ■■[was formally assigned as one of 2/1 0 MTNs 
Information Assurance Secunt^rhcers (lASOs). He was detailed to this position 
because he had completed a commercial certification course, "Security +." 
Notwithstanding his designation as IASO, he did not perform these duties nor was he 
expected to perform these duties during the deployment. Rather, he performed the 
duties of I nformat ion Assurance Network Manager (IANM). The Investigation revealed 
that CW2 HHf9fl conducted his IANM duties in accordance with applicable policies and 
regulations. 



■ 



(b) (5), (b) (6), (b) (7)(C) 




u. (U//F©UO)CW2gHHH (IASO, 2/10 MTN). 

(1 ) (U/ /FOUQ) CW2 was formally assigned as one of 2/1 0 MTNs 
Inform ation Assurance Secunt^fficers (lASOs). The Investigation revealed that CW2 
■HI conducted his IASO duties in accordance with applicable policies and 
regulations. 





(b) (5), (b) (6), (b) (7)(C) 








■ 









v. (U//FQUO) WQ1M ■ (Formerly SSG/PIt Sgt and S-2 Fusion Cell 

NCOIC). 



(1) (U// FOUO) W01 (then SSG)HH|| was PFC Manning's Platoon Sergeant 
pre-deployment and retained that positioruhrough 1 1 February 2010, while 2/10 MTN 
was deployed. His position vested him with supervisory authority over PFC Manning; 
however, he failed to properly exercise that authority. Notwithstanding his positional 
authority as Platoon Sergeant an d his kno wledge of PFC Manning's numerous issues 
while under his leadership, W01 £■■ took no action to address PFC Manning's 
conduc t or behavior. His rationale It taking appropriate action was that MSG 
WE3M had told him that he (SSGjglQllffl was PFC Manning's technical supervisor 
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only, responsible only for PFC Manning's work pro duct, an d that all Soldier issu es 
affecting PFC Manning would be handled by MSG himself. When MSG | 

failed to take a ppropriat e action regarding PFC Manning s conduct and behavior, 
howe ver, WQ 1 HH|| did nothing, content with his role as technical supervisor only. 
W01 HH | abdicated his responsibilities over PFC Manning to MSG^H and then 
failed ertheno notify the chain of command of the numerous issues he observed or to 
take appropriate action to address those issues, to include PFC Manning's alleged 
violence toward other Soldiers and repeated FTRs. 



w. (U//EQUQ) MSG 



(S-2 NCOIC, 2/10 MTN). 



He 



(1 ) (U/ /FOUO) MSG H| was the NCOIC of the 2/1 0 MTN S-2 Section, 
was responsible for the day tcHJay administrative supervision and leadership of enlisted 
personnel within the staff section. 

(2) (U/ /FOUQ) MSG^ , | Supervisory Environment. In a traditional unit, 
leaders are expected to counse^oldiers, address deficiencies, recommend both 
awards and, when appropriate, discipline, and perhaps most importantly, keep the 
UCMJ Chain of Command informed of those issues affe cting the well being and 
behavioral health of Soldiers within the formation. MSGlH^ whose approach to 
leadership appeared to be hands on, close, and personau5ecame too close to PFC 
Manning, losing the necessary objectivity to effectively lead Soldi ers both in Garrison 
and during a deployment. This loss of objectivity resulted in MSG | | directing the 
other leaders with responsibility for PFC Manning (such as PFC Manning's Platoon 
Sergeant and Section OICHo leave all Soldier issues regarding PFC Manning to MSG 

I himself. MSG |HH effectively stripped key leaders of any responsibility over 
fanning other tharHecnnical responsibility for intelligence-related products. MSG 
" loss of objectivity, coupled with his decision to truncate and modify the doctrinal 
lain of Command and supervision over PFC Manning, resulted in the failure of critical 
information to flow to the UCMJ Chain of Command. 

(3) (U/ /FOUO) Failure to Keep Command Informed. MSG ■■■elected to 

keep information related to PFC Manning to himself and to handle alRH^FC Manning's 
issues a t his level. When the question of whether to deploy PFC Manning arose, MSG 
■H in consultation with the S-2, decided to deploy the Soldier. The Chain of 
command w as not in formed. When PFC Manning was struggling with behavioral health 
issues, MSGHH| handled the situations without advising the command, 
recommendin^hat PFC Manning self-refer to Behavioral Health, thus limiting the 
information available to the command. When PFC Manning had emotion al outbu rsts 
resulting in violence directed at other Soldiers or was disrespectful, MSGBHI 
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handled the situation by merely talking to PFC Manning and not advising the chain of 
command. When PFC Manning made a statement potentially indicating a lack of loyalty 
to th e United States, further stating that the United States flag meant nothing to him, 
MSG HH| kept the information from the Chain of Command and failed to take any 
action t^rrect PFC Manning's access to classified information. Even after PFC 
Manning sent a n email to MSG jjj^PI with a photo of himself wearing a blond wig and 
make-up, MSG (gj^J did nothing to notify the Chain of Command. 

(4WU//F0UO) Failure to take appropriate actions after PFC Manning assaulted 
SPCHHBJBTw^ hours after PFC Manning had assaulted another Soldier in 
the SClpn^oGpHB was observed "walking" with him and all owing PFC Manning to 
retain possessior^HTis weapon an d ammu nition. MSG a 9 ain failed to not 'fy the 

Chain of Command. In short, MSG HKifl had countless opportunities to advise the 
Chain of Command about PFC ManningVconduct, yet repeatedly chose to do nothing, 
actively taking step^o ensure that he, and only he, handled issues related to PFC 
Manning. MSGDBH guidance to all others in PFC Manning's supervisory chain was 
clear-only MSG was to deal with PFC Manning. 

(5) (U/ /FOUO ) Dereliction of Duty. MSG H9| was derelict in his duties as S-2 
NCOIC. He kept vital information from the Chair^fCommand, assuming, in essence, 
the roles of Section NCOIC, First Sergeant, and Company Commander. He made 
himself the keeper of all information related to PFC Manning and took on the role of 
making all critical command decision s regarding PFC Manning, notwithstanding his lack 
of command authority. MSGjHpIp with limited consultation with the S-2, decided to 
deploy PFC Manning. M SGj kg decided to allow PFC Manning to self-refer to 
Behavioral Health. MSG Hg^aecided whether t he comm and should be informed 
about PFC Manning's conducUmd behavior. MSG |bh decided not to inform the 
command about an email from PFC Manning that snoul^iave caused a reasonable 
intelligence section NCOIC to believe that PFC Manning had significant behavioral 
health problems. Finally, through tactics designed to fence-off PFC Manning from 
involvement with other leaders and his own protectiveness of PFC Manning, MSG 

Sallowed PFC Manning to retain access to classified information. As a result, key 
5 did not have a complete picture of PFC Manning. Had those leaders been 
made aware of PFC Manning's conduct and behavior, that knowledge should have led 
them to suspend his access to classified information or to initiate the revocation of his 
security clearance. 



Kb) (5), (b) (6), (b) (7)(C) 
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)i (6). [DJ (7){C) 



x. (U//f©UO)_SSGj 




(S-2 NCO, 2/10MTN). 



(1 ) (U// FOUO) SSG I - I exercised administrative supervisory responsibilities 
over PFC Manning prior to 2/T^ mtN's de ployment in October of 2009. From October 
of 2009 until March of 2010, SGT^H did not work in the SCIF and did not exercise 

e' ninistrative or supervisory control of PFC Manning. In March of 2010, SGT 
was made the platoon sergeant and w as respons ible for counseling PFC 
g after the 8 May 2010 assault on SPCf 




(U//J=QU©)SPC 



(Team Ldr, S-2, 2/10 MTN). 



(1) (U// FOUO) SPCHH|| performed duties as PFC Manning's immediate 
supervisor in November ancmecember 2009. During his time as PFC Manning's 
supervisor, he and PFC Manning were of equal rank. PFC Manning was not reduced 
from SPC to PF C until his Company Grade Article 15 on 24 May 2010 (relative to his 
assault on SPC|< i i _^^n8May 2010). At the time he exercised supervisory duties 
over PFC Manning^PCJ w r | had not yet attended any Army leadership schools or 
training. His exact role rec ding PFC Manninc^as unclear as evidenced by the fact 
that he had to ask MSG H|| and SSG I for permission to counsel PFC 
Manning. Additionally, tn^xact supervisor^hain in the SCIF was unclear. SPC 
role as PFC Manning's supervisor ended after the table-flipping outburst in 
>er of 2009. 



Manning. 
Decemoei 




z . (U//*=OUO)SPCl 



(Team Ldr, S-2, 2/10 MTN). 



(1) (U/ /FOUO) SPC| ■ performed duties as PFC Manning's immediate 
supervisor, both pre-deploymennlna for two months at the beginning of the deployment 
(i.e., October-November 2009). During her time as PFC Manning's supervisor, she and 
PFC Manning were of equal rank. PFC Manning was not reduced from SPC to PFC 
until his Company Grade Article 15 on 24 May 2010. 
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J 















ROBERT L CA^LEN, JR. 
Lieutenant General, USA 
Investigating Officer 
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Individual 

COL 




LTC 



(D)(0). (DM').. 



(b) (6). (b) (7)(C) 




LTC 
LTC 

LTC 
MAJ 
MAJ 
MAJ 
MAJ 

MAJ | 

CPT 
CPT 
CPT 




(6), (b) 



(6), b) 



D)(b). (D) (/;((-.) 



b) (6), (b (7) C) 



CPT 



(b) (6), (b) (7)(C) 



SECTION VI: Appendices 

Appendix 1 : Personnel Listing 
Organization 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, US Army Medical Command 

Headquarters, 10th Mountain Division 

Ops Group C, Battle Command Training Program 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

1st Information Operations Command (Land) 
Headquarters, 1st Armored Division 

US Army ROTC Instructor Group, Old Dominion 
University 

113th Medical Company (Combat Stress Control) 
Headquarters, 1st Armored Division 

J6, United States Forces-Iraq 

743d Military Intelligence Battalion 

1st Information Operations Command (Land) 

Company C, 442d Signal Battalion 

Headquarters, 1st Armored Division 

5th Signal Command 

Headquarters, 22d Chemical Battalion (Technical 
Escort) 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters and Headquarters Company, 2d 
Brigade Special Troops Battalion, 10th Mountain 
Division 

Company A (MICCC), 304th Military Intelligence 
Battalion 



Location 

Fort Drum, NY 

Fort Sam Houston, 
TX 

Fort Drum, NY 

Fort Leavenworth, 
Kansas 

Fort Drum, NY 

Fort Belvoir, VA 

Wiesbaden, 
Germany 

Norfolk, VA 

Stanton, CA 

Wiesbaden, 
Germany 

Baghdad, Iraq 

Buckley AFB, CO 

Fort Belvoir, VA 

Fort Gordon, GA 

Wiesbaden, 
Germany 

Mannheim, 
Germany 

Aberdeen Proving 
Grounds, MD 

Fort Drum, NY 
Fort Drum, NY 
Fort Drum, NY 

Fort Huachuca, AZ 
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Individual Organization Location 

iQiyMJDIOIttU Headquarters, 4th Battalion, 31st infantry Fort Drum, NY 

CPtI Kenner Army Health Clinic Fort Lee, VA 

CPtI Headquarters, First Army Division-East Fort Meade, MD 

CPlB Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

CPtI 1 908th Medical Detachment (Combat Stress Topeka, KS 

Control) 

1 LT I Headquarters, 2d Brigade Combat Team, 1 0th Fort Drum, NY 

Mountain Division 

gHSffl^ Battery G (FSC), 3d Battalion, 82d Field Artillery Fort Hood, TX 

1 LT I Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

[QHjgyggQmi Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

CW2 HHHHI Headquarters, 2d Brigade Combat Team, 1 0th Fort Drum, NY 

^^^^^^^^^^^ Mountain Division 

) Qf^gggg^ra Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

CW2 1 Headquarters, 2d Brigade Combat Team, 1 0th Fort Drum, NY 

Mountain Division 

CW2 1 Headquarters, 19th Expeditionary Sustainment US Army Garrison 

Command Henry, Korea 

l [jQQESSB3IS2E9l Company B, 741st Military Intelligence Battalion Fort Meade, MD 

1 [BIOMBIHM Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

CSM H Headquarters, 1st Squadron, 89th Cavalry Fort Drum, NY 

MSG | Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

MSG myml&l Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

MSGQmOm Headquarters, 2d Brigade Combat Team, 10th Fort Drum, NY 

Mountain Division 

[0iyM0ItlIU)] Headquarters, 4th Infantry Division Fort Carson, CO 

sfc| Company B, 2d Brigade Special Troops Battalion, Fort Drum, NY 

10th Mountain Division 

Headquarters, 2d Brigade Combat Team, 4th Fort Carson, CO 

Infantry Division 

SFC BDI(aMtDIt>ia« US Army Element, US Strategic Command Offutt AFB, NE 

SFC «MQMID1 (US Army Retired) 
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Individual 

SSG 




(0) (b). (0)(f){^ 



b) (6). (b) (7)(C) 




SPC 



Organization 

Headquarters, 10th Mountain Division and Fort 
Drum 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Center for Information Dominance, Corry Station 

Company B, 2/10 Brigade Special Troops Battalion 
Company B, 2/10 Brigade Special Troops Battalion 
Headquarters, 1st Armored Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Company C, 741st Military Intelligence Battalion 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Company B, 2/10 Brigade Special Troops Battalion 

Company B, 2/10 Brigade Special Troops Battalion 

Company B, 2/10 Brigade Special Troops Battalion 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Company C, 229th Military Intelligence Battalion 

Company B, 2/10 Brigade Special Troops Battalion 

HHC, 2/10 Brigade Special Troops Battalion 

HHC, 2/10 Brigade Special Troops Battalion 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 3d Brigade Combat Team, 82d 
Airborne Division 

Company B, 3d Military Intelligence Battalion 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

(No longer in U.S. Army) 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 



Location 
Fort Drum, NY 

Fort Drum, NY 

Naval Air Station 
Pensacola, FL 

Fort Drum, NY 

Fort Drum, NY 

Wiesbaden, 
Germany 

Fort Drum, NY 

Fort Drum, NY 

Fort Meade, MD 
Fort Drum, NY 

Fort Drum, NY 
Fort Drum, NY 
Fort Drum, NY 
Fort Drum, NY 

Presidio of 
Monterey, CA 

Fort Drum, NY 

Fort Drum, NY 

Fort Drum, NY 

Fort Drum, NY 

Fort Bragg, NC 

US Army Garrison 
Humphreys, Korea 

Fort Drum, NY 



Fort Drum, NY 
Fort Drum, NY 
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Individual 

SPC 
SPC 



(6). (b) (7)(C) 



SPC 
SPC 



(6), (b) (7)(C) 




Mr. Mayfield, David 

Dr. Sageman, Marc 

Mr. | 
Mr. 



Organization 

(No longer in U.S. Army) 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

HHC, 2/10 Brigade Special Troops Battalion 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 2d Brigade Combat Team, 10th 
Mountain Division 

Headquarters, 10th Mountain Division and Fort 
Drum 

Office of The Judge Advocate General 

General Dynamics Information Technology, Inc. 

HQDA, Office of the Deputy Chief of Staff, G-2 

National Geospatial Intelligence Agency 

Headquarters, 10th Mountain Division and Fort 
Drum 



Location 

Fort Drum, NY 

Fort Drum, NY 
Fort Drum, NY 

Fort Drum, NY 

Fort Drum, NY 

Fort Drum, NY 

Washington, DC 
Fort Huachuca, AZ 
Washington, DC 
Bethesda, MD 
Fort Drum, NY 
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Appendix 2: Investigative Team Members 



LTG Robert L. Caslen, Jr. 
LTCF 




MG Michael T. Flynn 
COL 




OIC, Investigative Team 
Deputy, Investigative Team 

Legal Advisor 
Legal Advisor 



Investigative 
Investigative 
Investigative 
Investigative 
Investigative 
Investigative 
Investigative 
Investigative 
Investigative 
Investigative 



Officer 
Officer 
Officer 
Officer 
Officer 
Officer 
Officer 
Officer 
Officer 
Officer 



Combined Arms Center 
Combined Arms Center 

Office of the Judge Advocate General 
Office of the Judge Advocate General 

HQs, Dept. of the Army, G-2 
Signal Center of Excellence 
Signal Center of Excellence 
Combined Arms Center 
Combined Arms Center 
Combined Arms Center 
Combined Arms Center 
Combined Arms Center 
Intelligence Center of Excellence 
Signal Center of Excellence 
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Appendix 3: Abbreviations/Acronyms 



ABN Airborne 

AD Armored Division 

AIT Advanced Individual Training 

ALARACT All Army Activities 

AOR Area of Responsibility 

APFT Army Physical Fitness Test 

AR Army Regulation 

ASVAB Armed Services Vocational Aptitude Battery 

BBP Best Business Practices 

BCT Brigade Combat Team 

C&A Certification and Accreditation 

CCF Central Clearance Facility 

CCHQ CENTCOM Headquarters 

CCR CENTCOM Regulation 

CD Cavalry Division 

CENTCOM U.S. Central Command 

CFH CENTCOM Forward Headquarters 

CFR Code of Federal Regulations 

CH Chaplain 

CID U.S. Army Criminal Investigation Command 

CIS Chief of Information Systems 

CND Computer Network Defense 

CNSSI Committee on National Security Systems Instruction 

CoC Chain of Command 

COP Combat Outpost 

COS Contingency Operating Site 

COTS Commercial Off-the-Shelf 

DA Department of the Army 

DAA Designated Approving Authority or Designated Accreditation Authority 

DCID Director of Central Intelligence Directive 

DCS Deputy Chief of Staff 

DEROG Report of Unfavorable Information for Security Determination (DA Form 
5248-R) 

DIA Defense Intelligence Agency 

DIACAP DoD Information Assurance Certification and Accreditation Process 

DISA Defense Information Systems Agency 

DISN Defense Information Systems 

DITSCAP Defense Information Technology Certification and Accreditation Process 

DNI Director of National Intelligence 

DNS Domain Name Server 
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DoD 


Department of Defense 


DoDD 


Department of Defense Directive 


DoDI 


Department of Defense Instruction 


DoDIIS 


Department of Defense Intelligence Information System 


DoJ 


Department of Justice 


DTM 


Directive-Type Memorandum 


e-QIP 


Electronic Questionnaire for Investigations Processing 


ERB 


Enlisted Records Brief 


EXORD 


Execution Order 


FM 


Field Manual 


FORSCOM 


U.S. Army Forces Command 


FTR 


Failure to Repair 


G-2 


General Staff Intelligence Section 


G-6 


General Staff Signal Section 


GOMOR 


General Officer Memorandum of Reprimand 


GOTS 


Government Off-the-Shelf 


HBSS 


Host-Based Security System 


HHC 


Headquarters and Headquarters Company 


HIPAA 


Health Insurance Portability and Accountability Act 


HP/RR/SP 


Health Promotion/ Risk Reduction/Suicide Prevention 


HQDA 


Headquarters, Department of the Army 


HUMINT 


Human Intelligence 


IA 


Information Assurance 


IAM 


Information Assurance Manager 


IANE 


Information Assurance Network Engineer 


IANM 


Information Assurance Network Manager 


IASO 


Information Assurance Security Officer 


IAT 


Information Assurance Technician 


IAVM 


Information Assurance Vulnerability Management 


IC 


Intelligence Community 


ICD 


Intelligence Community Directive 


IJOA 


Iraq Joint Operating Area 


ILE 


Intermediate Level Education 


INFOSEC 


Information Security 


I RTF 


Information Review Task Force 


IS 


Information System 


ISSO 


Information System Security Officer 


IT 


Information Technology 


JFCOM 


U.S. Joint Forces Command 


JP 


Joint Publication 


JRE 


Joint Reform Effort 


JSS 


Joint Security Station 
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JTF 


Joint Task Force 


MEDCOM 


Medical Command 


MFR 


Memorandum For record 


MND-B 


Multi-National Division-Baghdad 


MNF-I 


Multi-National Forces-Iraq 


MOS 


Military Occupational Specialty 


MSC 


Major Subordinate Command 


MTN 


Mountain 


NCIC 


National Crime Information Center 


NCOES 


Noncommissioned Officer Education System 


NCOIC 


Noncommissioned Officer-ln-Charge 


NEC 


Network Enterprise Center 


NETCOM 


US Army Network Enterprise Technology Command 


NIPRNET 


Nonsecure Internet Protocol Router Network 


NIS 


National Investigative Standards 


NIST 


National Institute of Standards 


NSTISSI 


National Security Telecommunications and Information Systems Security 




Committee Instruction 


OIC 


Officer in-Charge 


OPM 


Office of Personnel Management 


OTSG 


Office of the Surgeon General 


PHI 


Personal Health Information 


Pll 


Personally Identifiable Information 


PL 


Public Law 


POA&M 


IT Security Plan of Action and Milestones 


PT 


Physical Training 


RCERT 


Regional Computer Emergency Response Team 


RIP/TOA 


Relief in Place/Transfer of Authority 


S-2 


Brigade/Battalion Intelligence Section 


S-6 


Brigade/Battalion Signal Section 


SA 


Special Agent 


SAV 


Staff Assistance Visit 


SCI 


Sensitive Compartmented Information 


SCIF 


Sensitive Compartmented Information Facility 


SF 


Standard Form 


SIGACT 


Significant Activity 


SIGINT 


Signals Intelligence 


SIO 


Senior Intelligence Official or Senior Intelligence Officer 


SIPRNET 


Secure Internet Protocol Router Network 


SSBI 


Single Scope Background Investigation 


SSO 


Special Security Officer 


SSR 


Special Security Representative 
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ST 


Skilled/Technical (ASVAB category) 


STT 


Stability Transition Team 


TASO 


Terminal Automation Security Officer 


TNOSC 


Theater Network Operations and Security Center 


TPI 


Two-Person Integrity 


TS 


Top Secret 


UCMJ 


Uniformed Code of Military Justice 


UK 


United Kingdom 


use 


United States Code 


USD-C 


United States Division-Center 


USF-I 


United States Forces-Iraq 


XO 


Executive Officer 
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Appendix 4: Abbreviations of Ranks 

Enlisted/Noncommissioned officers 



PVT 


Private 


PFC 


Private First Class 


SPC 


Specialist 


SGT 


Sergeant 


SSG 


Staff Sergeant 


SFC 


Sergeant First Class 


MSG 


Master Sergeant 


1SG 


First Sergeant 


SGM 


Sergeant Major 


CSM 


Command Sergeant Major 


Warrant Officers 


W01 


Warrant Officer One 


CW2 


Chief Warrant Officer Two 


CW3 


Chief Warrant Officer Three 


CW4 


Chief Warrant Officer Four 


Commissioned Officers 


2LT 


Second Lieutenant 


1LT 


First Lieutenant 


CPT 


Captain 


MAJ 


Major 


LTC 


Lieutenant Colonel 


COL 


Colonel 


BG 


Brigadier General 


MG 


Major General 


LTG 


Lieutenant General 


Naval Officers 




LTJG 


Lieutenant, Junior Grade 


LT 


Lieutenant 


LCDR 


Lieutenant Commander 


CDR 


Commander 


CAPT 


Captain 


RDML 


Rear Admiral (Lower Half) 
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Appendix 5: Definitions 

Access control 

The process of granting or denying specific requests: 1) for obtaining and using 
information and related information processing services; and 2) to enter specific 
physical facilities (e.g., Federal buildings, military establishments, and border crossing 
entrances). (CNSSI4009) 

Accreditation 

(USG) Formal declaration by a Designated Accrediting Authority (DAA) or Principal 
Accrediting Authority (PAA) that an information system is approved to operate at an 
acceptable level of risk, based on the implementation of an approved set of technical, 
managerial, and procedural safeguards. (CNSSI 4009) 

Accreditation Decision 

(Army) An official designation from a DAA, in writing or digitally signed Email, made 
visible to the CIO/G-6, regarding acceptance of the risk associated with operating an 
IS. Expressed as ATO, IATO, IATT, or DATO. 

Authentication 

(USG) The process of verifying the identity or other attributes claimed by or assumed of 
an entity (user, process, or device), or to verify the source and integrity of data. (CNSSI 
4009) 

Authorization to operate (ATO) 

(DoD) Authorization granted by a DAA for a DoD IS to process, store, or transmit 
information. An ATO indicates a DoD IS has adequately implemented all assigned IA 
controls to the point where residual risk is acceptable to the DAA. ATOs may be issued 
for up to 3 years. (DoDI 8510.01) 

Availability 

(USG) The property of being accessible and useable upon demand by an authorized 
entity. (CNSSI 4009) 

Bandwidth 

(Army) The maximum rate at which an amount of data can be sent through a given 
transmission channel. (AR 25-1) 

Certification 

(USG) Comprehensive evaluation of the technical and non-technical security features of 
an IS and other safeguards, made in support of the accreditation process, to establish 
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the extent to which a particular design and implementation meets a set of specified 
security requirements. (CNSSI 4009) 

Certification and accreditation 

The standard DoD approach for identifying information security requirements, providing 
security solutions, and managing the security of DoD information systems. (AR 25-2) 

Collateral 

(DoD) All national security information classified Confidential, Secret, or Top Secret 
under the provisions of an Executive order for which special systems of 
compartmentation (such as SCI or SAPs) are not formally required. (DoDI 5200.01) 

Computer Network Defense (CND) 

(DoD) Actions taken to protect, monitor, analyze, detect and respond to unauthorized 
activity within Department of Defense information systems and computer networks. Also 
called CND. (J P 1-02) 

Computing environment 

(USG) Workstation or server (host) and its operating system, peripherals, and 
applications. (CNSSI 4009) 

Confidentiality 

(USG) The property that information is not disclosed to system entities (users, 
processes, devices) unless they have been authorized to access the information. 
(CNSSI 4009) 

Denial of authorization to operate (DATO) 

(USG) DAA determination that an information system cannot operate because of an 
inadequate IA design or failure to implement assigned IA controls. If the system is 
already in use, operation of the system is halted. (CNSSI 4009) 

Designated approving authority (DAA) 

(USG) Official with the authority to formally assume responsibility for operating a system 
at an acceptable level of risk. This term is synonymous with authorizing official, 
designated accrediting authority, and delegated accrediting authority. (CNSSI 4009) 

(Army) A general officer (GO), SES or equivalent official appointed by the Army CIO/G- 
6 with the authority to formally assume responsibility for operating a system at an 
acceptable level of risk. This term is synonymous with Designated Authorization 
Authority and Delegated Accrediting Authority. (AR 25-2) 
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DIACAP Package 

(DoD) The collection of documents or collection of data objects generated through 
DIACAP implementation for an IS. A DIACAP package is developed through 
implementing the activities of the DIACAP and maintained throughout a system's life 
cycle. Information from the package is made available as needed to support an 
accreditation or other decision such as a connection approval. (DoDI 8510.01) 

DoD Information Assurance Certification and Accreditation Process (DIACAP) 

(DoD) The DoD process for identifying, implementing, validating, certifying, and managing 
IA capabilities and services, expressed as IA controls, and authorizing the operation of DoD 
ISs, including testing in a live environment, in accordance with statutory, Federal, and DoD 
requirements. (DoDI 8510.01) 

Domain 

(USG) An environment or context that includes a set of system resources and a set of 
system entities that have the right to access the resources as defined by a common 
security policy, security model, or security architecture. See also security domain. 
(CNSSI 4009) 

Enclave 

(USG) Collection of information systems connected by one or more internal networks 
under the control of a single authority and security policy. The systems may be 
structured by physical proximity or by function, independent of location. (CNSSI 4009) 

(DoD) Collection of computing environments connected by one or more internal 
networks under the control of a single authority and security policy, including personnel 
and physical security. Enclaves always assume the highest mission assurance category 
and security classification of the AIS applications or outsourced IT-based processes 
they support, and derive their security needs from those systems. They provide 
standard IA capabilities, such as boundary defense, incident detection and response, 
and key management, and also deliver common applications, such as office automation 
and electronic mail. Enclaves may be specific to an organization or a mission, and the 
computing environments may be organized by physical proximity or by function 
independent of location. Examples of enclaves include local area networks and the 
applications they host, backbone networks, and data processing centers. (DoDI 
8500.02) 

End-to-end security 

(USG) Safeguarding information in an information system from point of origin to point of 
destination. (CNSSI 4009) 
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Host Based Security System (HBSS) 

The HBSS baseline is a flexible, commercial off-the-shelf (COTS) based application. 
The system can detect and counter, in real-time, against known cyber-threats to 
Department of Defense (DoD) enterprise. Under the sponsorship of the Enterprise-wide 
Information Assurance and Computer Network Defense Solutions Steering Group 
(ESSG), the HBSS solution will be attached to each host (server, desktop, and laptop) 
in DoD. The system will be managed by local administrators and configured to block 
known-bad traffic using an Intrusion Prevention System (IPS) and host firewall. (DISA) 

Identity-based access control 

(USG) Access control based on the identity of the user (typically relayed as a 
characteristic of the process acting on behalf of that user) where access authorizations 
to specific objects are assigned based on user identity. (CNSSI 4009) 

Information Assurance (IA) 

(DoD) Measures that protect and defend information and information systems by 
ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. 
This includes providing for restoration of information systems by incorporating 
protection, detection, and reaction capabilities. (DoDD 8500.01 E, 24 OCT 02) (JP 1-02) 

(Army) The protection of systems and information in storage, processing, or transit from 
unauthorized access or modification; denial of service to unauthorized users; or the 
provision of service to authorized users. It also includes those measures necessary to 
detect, document, and counter such threats. Measures that protect and defend 
information and ISs by ensuring their availability, integrity, authentication, confidentiality, 
and non-repudiation. This includes providing for restoration of ISs by incorporating 
protection, detection, and reaction capabilities. This regulation designates IA as the 
security discipline that encompasses COMSEC, INFOSEC, and control of 
compromising emanations (TEMPEST). (AR 25-2) 

Information Assurance Manager (IAM) 

(USG) Individual responsible for the information assurance of a program, organization, 
system, or enclave. Listed under Information Systems Security Manager (ISSM) 
(CNSSI 4009) 

Information Assurance Officer (IAO) 

(DoD) An individual responsible to the IAM for ensuring that the appropriate operational 
IA posture is maintained for a DoD information system or organization. While the term 
IAO is favored within the Department of Defense, it may be used interchangeably with 
other IA titles (e.g., Information Systems Security Officer, Information Systems Security 
Custodian, Network Security Officer, or Terminal Area Security Officer). (DoDI 8500.02) 
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Information Assurance Vulnerability Management (IAVM) 

IAVM is the DoD program to identify and resolve identified vulnerabilities in operating 
systems. It requires the completion of four distinct phases to ensure compliance. 

Information Security (INFOSEC) 

(DoD) The protection of information and information systems against unauthorized 
access or modification of information, whether in storage, processing, or transit, and 
against denial of service to authorized users. (JP 1-02) 

(DoD) The system of policies, procedures, and requirements established under the 
authority of E.0. 12958 (reference (e)) to protect information that, if subjected to 
unauthorized disclosure, could reasonably be expected to cause damage to the national 
security. (DoD 5200.01 -R) 

Information Systems Security Officer (ISSO) 

(USG) Individual assigned responsibility for maintaining the appropriate operational 
security posture for an information system or program. (CNSSI 4009) 

Information Technology (IT) 

(USG) (Army) Any equipment or interconnected system or subsystem of equipment that 
is used in the automatic acquisition, storage, manipulation, management, movement, 
control, display, switching, interchange, transmission, or reception of data or information 
by the executive agency. For purposes of the preceding sentence, equipment is used by 
an executive agency if the equipment is used directly or is used by a contractor under a 
contract with the executive agency which 1) requires the use of such equipment, or 2) 
requires the use, to a significant extent, of such equipment in the performance of a 
service or the furnishing of a product. The term "information technology" also includes 
computers, ancillary equipment, software, firmware and similar procedures, services 
(including support services), and related resources. The term "information technology" 
does not include any equipment that is acquired by a Federal contractor incidental to a 
Federal contract. (AR 25-1) (40 U.S.C. 1401 et seq.) 

Inside(r) threat 

(USG) An entity with authorized access (i.e., within the security domain) that has the 
potential to harm an information system or enterprise through destruction, disclosure, 
modification of data, and/or denial of service. (CNSSI 4009) 

Integrity 

(USG) The property whereby an entity has not been modified in an unauthorized 
manner. (CNSSI 4009) 
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(NIST) Guarding against improper information modification or destruction, and includes 
ensuring information non-repudiation and authenticity. (NIST 800-53). 

Intelligence Community (IC) and elements of the Intelligence Community. 

(USG) Consistent with section 3.5(h) of Executive Order 12333, as amended, the Office 
of the Director of National Intelligence; the Central Intelligence Agency; the National 
Security Agency; the Defense Intelligence Agency; the National Geospatial Intelligence 
Agency; the National Reconnaissance Office; other offices within the Department of 
Defense for the collection of specialized national foreign intelligence through 
reconnaissance programs; the intelligence and counterintelligence elements of the 
Army, the Navy, the Air Force, and the Marine Corps; the intelligence elements of the 
Federal Bureau of Investigation; the Office of National Security Intelligence of the Drug 
Enforcement Administration; the Office of Intelligence and Counterintelligence of the 
Department of Energy; the Bureau of Intelligence and Research of the Department of 
State; the Offices of Intelligence and Analysis of the Department of the Treasury and the 
Department of Homeland Security; the intelligence and counterintelligence elements of 
the Coast Guard; and such other elements of any department or agency as may be 
designated by the President, or designated jointly by the Director and the head of the 
department or agency concerned, as an element of the Intelligence Community. (DoDI 
5200.01) 

Interim authority to operate (IATO) 

(USG) Temporary authorization granted by the DAA to operate an information system 
under the conditions or constraints enumerated in the Accreditation Decision. (CNSSI 
4009) 

Interim authority to test (certification and accreditation) (IATT) 

(USG) Temporary authorization granted by the DAA to test an information system in a 
specified operational information environment (usually a live information environment or 
with live data) within the timeframe and under the conditions or constraints enumerated 
in the Accreditation Decision. (CNSSI 4009) 

IT Position Category 

(DoD) Applicable to unclassified DoD information systems, a designator that indicates 
the level of IT access required to execute the responsibilities of the position based on 
the potential for an individual assigned to the position to adversely impact DoD missions 
or functions. Position categories include: IT-I (Privileged), IT-II (Limited Privileged) and 
IT-III (Non-Privileged), as defined in reference (o). Investigative requirements for each 
category vary, depending on role and whether the incumbent is a U.S. military member, 
U.S. civilian government employee, U.S. civilian contractor or a foreign national. The 
term IT Position is synonymous with the older term Automated Data Processing (ADP) 
Position. (DoDD 8500.01 E) 



126 

UNCLASSIFIED//FOR OFFICIAL USE ONLY 



UNCLASSIFIED//FOR OFFICIAL USE ONLY 



ATZL-CG 

SUBJECT: AR 15-6 Report - Compromise of Classified Information to Wikileaks 



IT Security Plan of Action and Milestones (POA&M) 

(DoD) A permanent record that identifies tasks to be accomplished in order to resolve 
security weaknesses. Required for any accreditation decision that requires corrective 
actions, it specifies resources required to accomplish the tasks enumerated in the plan and 
milestones for completing the tasks. Also used to document DAA-accepted non-compliant 
IA controls and baseline IA controls that are not applicable. An IT Security POA&M may be 
active or inactive throughout a system's life cycle as weaknesses are newly identified or 
closed. (DoDI 8510.01) 

Need-to-know 

(USG) A method of isolating information resources based on a user's need to have 
access to that resource in order to perform their job but no more. The terms 'need-to 
know" and "least privilege" express the same idea. Need-to-know is generally applied to 
people, while least privilege is generally applied to processes. (CNSSI 4009) 

(Army) Approved access to, or knowledge or possession of, specific information 
required to carry out official duties. (AR 25-2) 

Network 

(Army) Communications medium and all components attached to that medium whose 
function is the transfer of information. Components may include ISs, packet switches, 
telecommunications controllers, key distribution centers, and technical control devices. 
(AR 25-2) 

Network security 

(USG) See information assurance. (CNSSI 4009) 

(Army) Protection of networks and their services from unauthorized modification, 
destruction, or disclosure. It provides assurance the network performs its critical 
functions correctly and there are no harmful side effects. (AR 25-2) 

Non-privileged access 

(Army) User-level access; normal access given to a typical user. Generally, all access 
to system resources is controlled in a way that does not permit those controls and rules 
to be changed or bypassed by a typical user. (AR 25-2) 

Non-repudiation 

(USG) Assurance that the sender of information is provided with proof of delivery and 
the recipient is provided with proof of the sender's identity, so neither can later deny 
having processed the information. (CNSSI 4009) 
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(NIST) Protection against an individual falsely denying having performed a particular 
action. Provides the capability to determine whether a given individual took a particular 
action such as creating information, sending a message, approving information, and 
receiving a message. (NIST 800-53) 

Personally Identifiable Information (PI!) 

(USG) Information which can be used to distinguish or trace an individual's identity, 
such as their name, social security number, biometric records, etc. alone, or when 
combined with other personal or identifying information which is linked or linkable to a 
specific individual, such as date and place of birth, mother's maiden name, etc. (CNSSI 
4009) 

Plan of Action and Milestones (POA&M) 

See IT Security Plan of Action and Milestones (POA&M). 

Principle of least privilege 

(Army) The principle of least privilege requires that a user be given no more privilege 
than necessary to perform a job. Ensuring least privilege requires identifying what the 
user's job is, determining the minimum set of privileges required to perform that job, and 
restricting the user to a system or domain with those privileges and nothing more. (AR 
25-2) 

Privileged access 

(Army) Authorized access that provides a capability to alter the properties, behavior, or 
control of the information system or network. It includes, but is not limited to, any of the 
following types of access: 

a. "Super user," "root," or equivalent access, such as access to the control 
functions of the information system or network, administration of user accounts, and so 
forth. 

b. Access to change control parameters (for example, routing tables, path 
priorities, addresses) of routers, multiplexers, and other key information system or 
network equipment or software. 

c. Ability and authority to control and change program files, and other users' 
access to data. 

d. Direct access (also called unmediated access) to functions at the operating- 
system level that would permit system controls to be bypassed or changed A 

e. Access and authority for installing, configuring, monitoring, or troubleshooting 
the security monitoring functions of information systems or networks (for example, 
network or system analyzers; intrusion detection software; firewalls) or in performance 
of cyber or network defense operations. (AR 25-2) 
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Role-Based Access Control (RBAC) 

(USG) Access control based on user roles (i.e., a collection of access authorizations a 
user receives based on an explicit or implicit assumption of a given role). Role 
permissions may be inherited through a role hierarchy and typically reflect the 
permissions needed to perform defined functions within an organization. A given role 
may apply to a single individual or to several individuals. (CNSSI 4009) 

Senior Intelligence Official (SIO) 

(USG) The highest ranking military or civilian official charged with direct foreign 
intelligence missions, functions, or responsibilities within a department, agency, 
component, or element of an Intelligence Community organization. (DoDI 5200.01) 
Also synonymous with Senior Intelligence Officer. 

Sensitive Compartmented Information (SCI) 

(DoD) All information and materials bearing special community controls indicating 
restricted handling within present and future community intelligence collection programs 
and their end products for which community systems of compartmentation have been or 
will be formally established. (These controls are over and above the provisions of DoD 
5200.1-R, Information Security Program Regulation.) Also called SCI. (JP 1-02) 

Sensitive Compartmented Information Facility (SCIF) 

(DoD) An accredited area, room, group of rooms, or installation where sensitive 
compartmented information (SCI) may be stored, used, discussed, and/or electronically 
processed. Sensitive compartmented information facility (SCIF) procedural and physical 
measures prevent the free access of persons unless they have been formally 
indoctrinated for the particular SCI authorized for use or storage within the SCIF. Also 
called SCIF. See also sensitive compartmented information. (JP 1-02) 

Sensitive information 

(USG) Any information the loss, misuse, or unauthorized access to or modification of 
which could adversely affect the national interest or the conduct of Federal programs, or 
the privacy to which individuals are entitled under 5 USC 552a (The Privacy Act), but 
which has not been specifically authorized under criteria established by executive order 
or an Act of Congress to be kept secret in the interest of national defense or foreign 
policy. Sensitive information includes information in routine DoD payroll, finance, 
logistics, and personnel management systems. Examples of sensitive information 
include, but are not limited to, the following categories: 

a. FOUO, in accordance with DoD 5400.7-R, is information that may be withheld 
from mandatory public disclosure under the FOIA. 

b. Unclassified technical data is data related to military or dual-use technology 
that is subject to approval, licenses, or authorization under the Arms Export Control Act 
and withheld from public disclosure in accordance with DoD 5230.25. 
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c. Department of State (DOS) sensitive but unclassified (SBU) is information 
originating from the DOS that has been determined to be SBU under appropriate DOS 
information security policies. 

d. Foreign government information is information originating from a foreign 
government that is not classified CONFIDENTIAL or higher but must be protected in 
accordance with DoD 5200. 1-R. 

e. Privacy data is personal and private information (for example, individual 
medical information, home address and telephone number, social security number) as 
defined in the Privacy Act of 1974. (AR 25-2) 

System administrator (SA) 

(USG) A system administrator (SA), or "sysadmin," is a privileged-level individual 
employed or authorized to maintain and operate a computer system or network. 
Individual responsible for the installation and maintenance of an information system, 
providing effective information system utilization, adequate security parameters, and 
sound implementation of established information assurance policy and procedures. 
(CNSSI 4009) 

TEMPEST 

(USG) A name referring to the investigation, study, and control of compromising 
emanations from telecommunications and automated information systems equipment. 
(CNSSI 4009) 

(DoD) An unclassified term referring to technical investigations for compromising 
emanations from electrically operated information processing equipment; these 
investigations are conducted in support of emanations and emissions security. (JP 1-02) 

Thin client 

(Army) The use of client-server architecture networks which depends primarily on the 
central server for processing activities which focuses on conveying input and output 
between the user and the remote server. In contrast, a thick or fat client does as much 
processing as possible and passes only data for communications and storage to the 
server. Many thin client devices run only web browsers or remote desktop software, 
meaning that all significant processing occurs on the server. (AR 25-1 ) 

Two-Person Control (TPC) 

(USG) Continuous surveillance and control of positive control material at all times by a 
minimum of two authorized individuals, each capable of detecting incorrect and 
unauthorized procedures with respect to the task being performed and each familiar 
with established security and safety requirements. (CNSSI 4009) 
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Two-Person Integrity (TPI) 

(USG) System of storage and handling designed to prohibit individual access by 
requiring the presence of at least two authorized individuals, each capable of detecting 
incorrect or unauthorized security procedures with respect to the task being performed. 
(CNSSI 4009) 

Wide area network (WAN) 

(Army) A WAN covers a wider geographic area than a LAN, is an integrated voice or 
data network, often uses common carrier lines for the interconnection of its LANs, and 
consists of nodes connected over point-to-point channels. Commercial examples are 
Internet and public data. Government examples are NIPRNET and SIPRNET. (AR 25-2) 
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